Commit graph

34 commits

Author SHA1 Message Date
Andy Walsh
1a503986f1 samba4: update to 4.11.6, add new UCI option
* update to 4.11.6
* add new UCI option "allow_legacy_protocols" to section [samba]

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-02-10 14:54:48 +01:00
Andy Walsh
85066d81d0 samba4: update to 4.11.4 (python3 version), add rpcsvc-proto, add libasn1 host build
* update to 4.11.4 (python3 version)
* re-enable AD-DC option
* add 'samba_nice' UCI option via "config procd 'extra'"
* restructure buildsteps (don't rely on waf --targets logic)
* move quota option into VFS
* move ACL option into AC-DC
* add more admin-tools
* use rpath_install for libs
* fix rpath + rstrip

extra:
* add rpcsvc-proto package _(don't rely on nfs-utils/host for headers, rpcgen anymore)_
* add libasn1 host build _(samba4 is looking for the bins)_

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-01-04 01:08:11 +01:00
Andy Walsh
5b2010ce80 samba4: add UCI option 'disable_async_io'
* add UCI option 'disable_async_io'
* remove [homes] options

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-22 14:15:12 +01:00
Andy Walsh
32a8209c55 samba4: update to 4.9.15
* update to 4.9.15
* fixes CVE-2019-10218, CVE-2019-14833, CVE-2019-14847
* update smb.conf.template (aio, sendfile)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-08 16:03:10 +01:00
Jan Pavlinec
937b19ebb7
treewide: add PKG_CPE_ID for better cvescanner coverage
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from bf2f1a0263)
2019-09-26 19:36:27 -07:00
Jan Pavlinec
fac472e28a
samba4: update to version 4.9.13 (security fix)
Fixes CVE-2019-10197

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from ad16f2a851)
2019-09-26 19:36:26 -07:00
Oever González
8671765883
samba4: remove double quotes for renice
The double quote thells the shell that the list returned from `pidof` is a
single argument, therefore, `renice` will cry about a malformed input.
With this commit, `renice` will be applied correctly to all the returned PIDs
from `pidof`.

The output of `renice` for the quoted list is as follows:
`renice: invalid number '6592 6587 6586 6574'`
`renice` does not show and does apply the nice value if the list is unquoted.

Signed-off-by: Oever González <notengobattery@gmail.com>
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from c45974d0a3)
2019-09-26 19:36:26 -07:00
Andy Walsh
cd597524d1
samba4: add python2 host dependency
* add python2/host dependency

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
(cherry-picked from c02ef3ae7f)
2019-09-26 19:36:26 -07:00
Rosen Penev
d3db014eb1
samba4: Run init script through shellcheck
Some performance improvements by batching file writes.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from d03b88b5b0)
2019-09-26 19:36:26 -07:00
Andy Walsh
8a20820a9b
samba4: revert to 4.9.11
* revert to 4.9.x series (4.10 needs too many unofficial patches and has weird waf bugs)
* cleanup patches
* enable AD_DC build option again

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
(cherry-picked from 2f2a4bccd9)
2019-09-26 19:36:25 -07:00
Andy Walsh
fd74d9f4ea samba4: update to 4.9.8
* fixes CVE-2018-16860

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-05-16 10:26:15 +02:00
Andy Walsh
9c8d7444cc samba4: update to 4.9.7
* update to 4.9.7
* add write_list, read_list UCI support

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-05-10 11:12:21 +02:00
Andy Walsh
710700c7b4 samba4: fix build with parallel jobs
* fixes openwrt/packages#8721

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-04-24 12:21:18 +02:00
Daniel Engberg
1f812c4518 Samba4: Rework URLs
Avoid Hetzner hosted servers due to availability (.ru users)
and try to keep availability as good as possible without
sacrificing performance for the majority of users.
Update upstream project download URL

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2019-04-17 20:26:31 +00:00
Andy Walsh
2cf952f7bb samba4: update to 4.9.6
* fix CVE-2019-3870, CVE-2019-3880
* switch to fossies.org as main download (faster)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-04-16 11:45:15 +02:00
Andy Walsh
3e1d9c0bfd samba4: update to 4.9.5, switch to embedded heimdal build
* update to 4.9.5
* use embedded heimdal build
* remove mitkrb5 deps
* add AD-DC tools (samba4kinit samba4kgetcred samba4kpasswd samba4ktutil)
* add eventlogadm to ADMIN tools
* build VFS modules shared
* preserve custom smb.conf after reboots
* add missing lib/samba/? private dirs, even if empty
* handle python-crypto via EXTRA_DEPENDS
* fix CONFIGURE_CMD argument order
* move python install to libs
* remove redundant Config.in selects

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-04-09 09:50:23 +02:00
Andy Walsh
77436747ce samba4: tmsize patch, build with netbios by default
* add patch for tmsize overflow (https://bugzilla.samba.org/show_bug.cgi?id=13622)
* re-enable netbios by default
(Some users still need netbios and its just a minor size increase 50kb)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-03-01 11:19:25 +01:00
Val Kulkov
d12521c169 samba4: add mandatory option per CVE-2018-16853
Since 4.9.3, Samba AD-DC with MIT Kerberos will refuse to build unless
--with-experimental-mit-ad-dc is provided to the configure command.

The mandatory requirement was introduced in response to a report that
a user in a Samba AD domain can crash the KDC when Samba is built in
the non-default MIT Kerberos configuration:
https://www.samba.org/samba/security/CVE-2018-16853.html

This requirement was introduced in Samba commit
c5370a4349d381ba3b64b063dc28a2c54cfacdfc.

Signed-off-by: Val Kulkov <val.kulkov@gmail.com>
2019-01-10 13:34:30 -05:00
Deng Qingfang
5b75a84165 samba4: update to 4.9.4
Fixes following CVEs (4.9.3 and 4.9.4):
CVE-2018-16853, CVE-2018-14629, CVE-2018-16853
CVE-2018-14629, CVE-2018-16841, CVE-2018-16851
CVE-2018-16852, CVE-2018-16853, CVE-2018-16857

Signed-off-by: Deng Qingfang <dengqf6@mail2.sysu.edu.cn>
2018-12-24 21:01:15 +08:00
Daniel Engberg
b4b451055d samba4: Update to 4.9.2
Update Samba to 4.9.2
Refresh patches

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2018-11-17 00:44:40 +01:00
Andy Walsh
409feb8ef6 samba4: fix hostname if not defined via Dnsmasq
* use kernel fs to get the hostname, drop domainname

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-10-15 10:28:01 +02:00
Andy Walsh
c5e0c3822a samba4: fix missing busybox 'hostname -f' command
* busybox does not have 'hostname' by default so replaced it with uci calls

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-09-29 11:06:09 +08:00
Andy Walsh
32328835df samba4: fix netbios_name
* fixes: error 0x80070035
* add triggers to catch hostname changes

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-09-27 17:03:28 +02:00
Andy Walsh
68270c787d samba4: update to 4.9.1
fixes: nmbd: Stop nmbd network announce storm (bug #13620).

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-09-24 11:02:47 +02:00
Andy Walsh
6d520e7d81 samba4: fix typo
* fix a typo in vfs_extd_audit

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-09-16 11:19:02 +02:00
Andy Walsh
31a8f1e98d samba4: update to 4.9.0
* update to 4.9.0
* move vfs_xattr_tdb to defaults
* add vfs_audit, vfs_extd_audit, vfs_full_audit to AD-DC variant
* disable jansson, libarchive by default, enabled for AD-DC variant
* update waf answers

Noteable smb.conf changes:
* store dos attributes Default changed yes
* ea support Default changed yes

Fixes: Timemachine "The identity of the Backup disk ... has changed since the previous backup."

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-09-14 12:05:04 +02:00
Andy Walsh
4c1a10a30c samba4: enable avahi by default, add timemachine support
* enable avahi by default, so Linux/Mac Clients can see samba shares
* enable timemachine config support
* fix invalid --builtin-libraries
* default to 'mdns name = mdns' in template

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-09-10 15:40:39 +02:00
Andy Walsh
8040e8c9a6 samba4: update to 4.8.5
* update to 4.8.5
* enable aesni support for x86_64
* add 'unbundle libbsd' patch
* update smb.conf.template (disable spoolss)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-09-01 14:03:09 +02:00
Andy Walsh
7358fc99fd samba4: update to 4.8.4
* remove perl, python host depends
* fixes: CVE-2018-1139, CVE-2018-1140, CVE-2018-10858, CVE-2018-10918, CVE-2018-10919
* remove avahi timemachine service file (4.8 handles this automatically via avahi client-lib)
* fix more optional depends

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-08-15 17:35:38 +02:00
Eneas U de Queiroz
460dbee226 samba4: add nfs-kernel-server/host build dependency
Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2018-08-06 17:31:23 +00:00
Andy Walsh
18e9a8b479 samba4: add missing avahi service definitions
Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-08-06 09:50:54 +08:00
Andy Walsh
0c13081965 samba4: switch to waf cross-answer files
* switch waf build to cross-answer files
* move timemachine related vfs modules to default vfs option

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-08-06 09:50:54 +08:00
Andy Walsh
efdd707dc7 samba4: add optional lib dependencies (libgcrypt, libpam)
* add libgcrypt, libpam to optional libs

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-08-01 13:59:00 +02:00
Andy Walsh
0d23c9f2ea samba4: add package samba-4.8
Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-07-26 21:38:19 +02:00