Commit graph

17277 commits

Author SHA1 Message Date
Aleksander Morgado
5f11888b12 modemmanager: install common utils in /usr/share/ModemManager
The modemmanager.common file includes several utility functions that
are used in several places like the protocol handler and in hotplug
scripts. These utilities should not be installed in /etc as they're
not configuration.

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2019-11-27 09:28:10 +01:00
Aleksander Morgado
ecad39fd60 modemmanager: don't flag the 'device' option as 'device' type
Unlike other modem protocol handlers like the ones implemented by uqmi
or umbim, in the modemmanager protocol handler the 'device' option
does not specify a device node in /dev. Therefore, we shouldn't flag
the option as 'device' type (dt_type_device).

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2019-11-27 09:28:10 +01:00
Aleksander Morgado
a684cdbab0 modemmanager: fix device unplug handling
When a USB modem device is unplugged, we had to do two different
things: first, cleanup the sysfs cache; and second, set interface as
unavailable.

Those two things were never being done properly due to several
different issues:

 * The parent sysfs path retrieval logic relies on checking for which
 sysfs path has the vid/pid files. This logic obviously only works
 when the device is available, and cannot be used on e.g. removal
 events.

 * The command to cleanup the modem wait status from the sysfs cache
 was not removing the previous state properly, because the sysfs path
 variable wasn't escaped properly for the sed command.

This patch handles those issues in order to have a proper device
removal handling, by making sure the sysfs path is properly escaped in
the sed command, and by introducing a new hotplug script that runs
when the full USB device is removed.

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2019-11-27 09:28:10 +01:00
Aleksander Morgado
cc4ee2fd3c modemmanager: flag as available and no_device when initializing
Otherwise, if the modem is reseted, netifd will think that the device
is gone forever.

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2019-11-27 09:28:10 +01:00
Aleksander Morgado
92781ecc7f modemmanager: add default proto configs
Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2019-11-27 09:28:10 +01:00
Rosen Penev
31636735a1
Merge pull request #10650 from neheb/procp
procps-ng: Remove DEFAULT line
2019-11-26 23:30:24 -08:00
Rosen Penev
536a0cf071
procps-ng: Remove DEFAULT line
The intended behavior is to has the buildbot select all the applets
as well as packages only selecting what they need. This should do it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-11-26 22:51:31 -08:00
Rosen Penev
4dbb240c5c
Merge pull request #10645 from Andy2244/softethervpn5-9672
softethervpn5: update to 5.01.9672
2019-11-26 14:23:45 -08:00
Andy Walsh
a6054083dd softethervpn5: update to 5.01.9672
* 5.01.9672 release
* Cedar: handle UDP acceleration and R-UDP versions
* Mayaqua: implement R-UDP version 2, powered by ChaCha20-Poly1305
* Cedar: implement UDP acceleration version 2, powered by ChaCha20-Poly1305
* Cedar: serve new web management interface
* Cedar: implement detailed protocol info
* Mayaqua: add Windows Server 2019 to the supported operating systems list
* Cedar: various fixes
* Cedar: add "DisableIPsecAggressiveMode" option
* Make install dir for unit files configurable
* Protocol.c: adapt ClientConnectGetSocket() for new proxy functions
* Wpc.c: adapt WpcSockConnectEx() for new proxy functions
* Protocol: add ProxyCodeToCedar()
* Move generic proxy stuff from Cedar to Mayaqua
* Proto_OpenVPN.c: improve OvsProcessData(), fix out-of-bounds access found by Coverity
* Proto_OpenVPN.c: fix segmentation fault in OvsProceccRecvPacket()
* Addressing the UDP reflection amplification attack: https://github.com/SoftEtherVPN/SoftEtherVPN/issues/1001
* Mayaqua.h: include <stdarg.h> for "va_list" on Illumos
* Protocol.c: fix bug in ClientConnectGetSocket() causing custom HTTP header not to work
* Mayaqua: move HTTP functions from "Network" to "HTTP"
* Move GetMimeTypeFromFileName() and related structure to Mayaqua
* Mayaqua.h: include <stdio.h> for "FILE"
* Mayaqua.h: include <stddef.h>, for "wchar_t"
* Bump mixin-deep in /src/bin/hamcore/wwwroot/admin/default
* - Fixed the problem occurs when RPC messages between Cluster Members exceed 64Kbytes. - Fixed the RADIUS PEAP client to use the standard TLS versioning. - Implementation of a function to fix the MAC address of L3 VPN protocol by entering e.g. "MAC: 112233445566" in the "Notes" field of the user information. - Implementation of a function to fix the virtual MAC address to be assigned to the L3 VPN client as a string attribute from RADIUS server when authentication.
* Updating built-in Win32 libraries - OpenSSL 1.1.1 -> 1.1.1d - zlib 1.2.3 -> 1.2.11
* Update strtable_cn.stb
* Avoid using hardcoded paths in log file enumeration
* Fix buffer overflow during NETBIOS name resolution
* Update SEVPN.sln
* Create strtable_pt_br.stb
* ci: display error if vpntest failed
* Fix several compile warnings on MS VC++ 2008.
* Enables crash minidump for Win32 vpntest. Minidump files will be saved to the 'C:\Users\<username>\AppData\Local\Temp\vpn_debug' (for normal user) or 'src\bin\vpn_debug\' (for administrator user).
* OpenVPN: use new protocol interface
* Add interface for easy protocol implementation
* add "no-deprecated" to openssl builds "no-deprecated" is widely used in openwrt devices
* Fix LibreSSL support
* Switch to OpenSSL THREADID API
* travis-ci: update openssl, libressl
* enable sonar-scan in travis-ci builds
* Virtual: fix race condition in DHCP server which resulted in multiple clients receiving the same IP
* Mayaqua: Fix compilation without deprecated OpenSSL APIs
* Mayaqua: Replace GNU specific sys/poll.h header with POSIX poll.h
* systemd: replace deprecated CAP_SYS_ADMIN with CAP_SYSLOG

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-26 15:14:25 +01:00
Paul Fertser
a8fa557cd5 strongswan: allow to specify per-connection reqid with UCI
This is useful to assign all traffic to a fw3 zone, e.g.:

/etc/config/ipsec:

config remote 'test'
	list tunnel		'dev'
...

config 'tunnel' 'dev'
	option reqid		'33'
...

/etc/config/firewall:

config zone
	option name		wan
	option extra_src	"-m policy --pol none --dir in"
	option extra_dest	"-m policy --pol none --dir out"
...

config zone
	option name		vpn
	# subnet needed for firewall3 before 22 Nov 2019, 8174814a
	list subnet		'0.0.0.0/0'
	option extra_src	"-m policy --pol ipsec --dir in --reqid 33"
	option extra_dest	"-m policy --pol ipsec --dir out --reqid 33"
...

Signed-off-by: Paul Fertser <fercerpav@gmail.com>
2019-11-26 15:27:54 +03:00
Rosen Penev
e1bb703a66
Merge pull request #10637 from Andy2244/cifsd-tools_update-2019-11-25
cifsd-tools: update to git (2019-11-25)
2019-11-25 20:15:15 -08:00
Stijn Tintel
784cb44b05
Merge pull request #10582 from neheb/domo
domoticz: Fix compilation with newer python
2019-11-26 01:59:00 +02:00
Rosen Penev
8015772fdb
php7: Properly fix compilation without deprecated APIs
It seems that OpenSSL is bugged. While OpenSSL uses this code, it doesn't
export these defines anywhere. Match against the API version instead.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-11-25 11:43:35 -08:00
Rosen Penev
73f99a44b2
Merge pull request #10588 from gladiac1337/pcre-jit-co
pcre: Add JIT-support for select architectures
2019-11-25 11:21:50 -08:00
Rosen Penev
72ff310e19
Merge pull request #10626 from NeoRaider/move-luasrcdiet
luasrcdiet: add package (moved from luci-base package)
2019-11-25 11:19:22 -08:00
Rosen Penev
2ae5b79804
Merge pull request #10630 from jefferyto/python-pyopenssl-19.1.0
python-pyopenssl: Update to 19.1.0
2019-11-25 11:14:27 -08:00
Andy Walsh
67e529da18 cifsd-tools: update to git (2019-11-25)
* cifsd-tools: fix Assignment of a signed value which has type 'long'
* init: convert hide_dot_files to yes/no option
* 'read only = no' seems bugged for cifsd/smb.conf, so fix via 'writeable = yes'

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-25 17:11:46 +01:00
Rosen Penev
6d9ee2ec86
transmission: Disable webseeding
It causes 100% CPU usage in certain situations. Just disable it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-11-24 19:01:58 -08:00
Rosen Penev
50e352a179
Merge pull request #10632 from wfleurant/ygg-bump-0-3-12
yggdrasil: bump to 0.3.12
2019-11-24 16:55:17 -08:00
William Fleurant
be4fe496ce yggdrasil: bump to 0.3.12
Signed-off-by: William Fleurant <meshnet@protonmail.com>
2019-11-24 19:18:53 -05:00
Michael Heimpold
d5699ae292
Merge pull request #10628 from BKPepe/php7
php7: Update to version 7.2.25
2019-11-24 21:48:07 +01:00
Jeffery To
aff03aee1f python-pyopenssl: Update to 19.1.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-11-25 03:23:26 +08:00
Josef Schlehofer
9bc48abd2a
php7: Update to version 7.2.25
- Fixes CVE-2019-11043

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-11-24 17:41:02 +01:00
Hannu Nyman
c6a8853c0d
Merge pull request #10519 from BKPepe/git
git: Update to version 2.24.0
2019-11-24 15:49:42 +02:00
Hannu Nyman
b25543c3f3
Merge pull request #10627 from hnyman/collectd-fix
collectd: enable cpufreq module for ipq40xx and brcm2708_bcm2709
2019-11-23 22:11:12 +02:00
Hannu Nyman
5e0d5c9c7f collectd: enable cpufreq module for ipq40xx and brcm2708_bcm2709
As some ipq40xx CPUs support frequency scaling, enable building
collectd-mod-cpufreq for ipq40xx (for private builds) and
its package architecture brcm2708_bcm2709 (for buildbot)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2019-11-23 20:47:18 +02:00
Rosen Penev
cf73e1b014
Merge pull request #10518 from BKPepe/clamav_update
clamav: Update to version 0.101.4
2019-11-23 10:44:07 -08:00
Rosen Penev
2707a95d31
clamav: Shellcheck fixes
Fix SC2129

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-11-23 18:55:22 +01:00
Josef Schlehofer
c7ad27ebbd
clamav: Update to version 0.101.4
Change deprecated options to a new one:
DetectBrokenExecutables to AlertBrokenExecutables
ArchiveBlockEncrypted to AlertEncrypted

Fixes: CVE-2019-12900 and CVE-2019-12625

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-11-23 18:55:22 +01:00
Matthias Schiffer
46d68b8699
luasrcdiet: add package (moved from luci-base package)
We use luasrcdiet in Gluon as well. Move it from the luci feed to packages.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
2019-11-23 16:37:34 +01:00
Dirk Brenken
54755c03e9
Merge pull request #10625 from dibdot/adblock
adblock: update 3.8.12
2019-11-23 14:02:57 +01:00
Dirk Brenken
219abdc5a1
adblock: update 3.8.12
* fix possible dns restart issue with DNS File Reset (race condition)

Signed-off-by: Dirk Brenken <dev@brenken.org>
2019-11-23 13:44:54 +01:00
Daniel Engberg
3761467fa8
Merge pull request #10621 from BKPepe/youtube
youtube-dl: Update to version 2019.11.22
2019-11-22 23:34:52 +01:00
Daniel Engberg
b16340d997
Merge pull request #10622 from diizzyy/fix-circleci
circleci: Revert switch to CDN due to breakage
2019-11-22 23:26:53 +01:00
Daniel Engberg
23c332e5eb circleci: Revert switch to CDN due to breakage
This reverts commit 27fdddf due to it causing random failures.
Change agreed on here: https://github.com/openwrt/packages/pull/10560

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2019-11-22 23:19:56 +01:00
Josef Schlehofer
1636a60e30
youtube-dl: Update to version 2019.11.22
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-11-22 23:00:15 +01:00
Rosen Penev
9d57b11e44
Merge pull request #10616 from Andy2244/samba4-22-11-2019
samba4: add UCI option 'disable_async_io'
2019-11-22 08:33:45 -08:00
Rosen Penev
a47004dfbb
Merge pull request #10615 from Andy2244/cifsd-22-11-2019
cifsd: update to git (2019-11-22)
2019-11-22 08:27:20 -08:00
Rosen Penev
18fc6d0082
Merge pull request #10614 from expiron/kcptun-updates
kcptun: bump to v20191112
2019-11-22 08:26:41 -08:00
Andy Walsh
ec3225b495 samba4: add UCI option 'disable_async_io'
* add UCI option 'disable_async_io'
* remove [homes] options

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-22 13:54:24 +01:00
Andy Walsh
5c2706a9ad cifsd: update to git (2019-11-22)
* cifsd: fix uninitialized fp could be freed
* cifsd: fix potential uninitialized spnego_blob could be freed
* cifsd: smbd: replace spinlock_irqsave with spinlock
* cifsd: smbd: avoid the lack of client's send credits
* cifsd-tools: add version generation script
* cifsd-tools: do not abbrev git describe
* cifsd-tools: use 'unknown' version string if git describe fails

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-22 13:43:17 +01:00
Christian Lachner
6c40db7e9f pcre: Add JIT-support for select architectures
- This commit adds a config-option for JIT in libpcre(1).

  According to research published on
  https://rust-leipzig.github.io/regex/2017/03/28/comparison-of-regex-engines/
  this should give a 10x performance increase on JIT operations
  which can be desireable for high performance Apache mod_rewrite
  or haproxy reqrep operations.

  This option is available on all officially supported architecutres
  which are listed on https://pcre.org/original/doc/html/pcrejit.html#SEC3.
  Furthermore, it is enabled by default on the following
  architectures: arm, i686, x86_64.

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2019-11-22 09:08:33 +01:00
Chao Liu
c233165fe0
kcptun: bump to v20191112
Signed-off-by: Chao Liu <expiron18@gmail.com>
2019-11-22 14:29:51 +08:00
Kevin Darbyshire-Bryant
0b30945de0 net/https-dns-proxy: Update to 2019-10-09
Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2019-11-21 21:05:44 +00:00
Florian Eckert
58010dbd88
Merge pull request #10547 from zhoreeq/yggdrasil_uci
yggdrasil: Change package configuration to UCI
2019-11-21 20:01:12 +01:00
Rosen Penev
fa0ef9c189
Merge pull request #10605 from rs/nextdns-1.1.5
nextdns: Update version 1.1.5 + add per host config option
2019-11-21 09:35:38 -08:00
Rosen Penev
82d4a10fe8
Merge pull request #10608 from ja-pa/bind-9.14.8
bind: update to version 9.14.8 (security fix)
2019-11-21 09:34:29 -08:00
George Iv
6857fd45c8 yggdrasil: Change package configuration to UCI
Signed-off-by: George Iv <57254463+zhoreeq@users.noreply.github.com>
2019-11-21 11:15:29 -05:00
Josef Schlehofer
ffeb852e61
python3: bump PKG_RELEASE
Fixes: 85eee2d7f8 (python3: fix build when
Blake2 not enabled in OpenSSL")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-11-21 15:19:15 +01:00
Rosen Penev
a634589ef6
Merge pull request #10604 from yorkie/fix/python3-build
python3: fix build when Blake2 not enabled in OpenSSL
2019-11-21 05:21:00 -08:00