Compare commits

..

590 commits

Author SHA1 Message Date
Daniel Golle
d0cd9f198d
Merge pull request #6124 from wigyori/for-15.05-freeradius2
CC: freeradius2: bump to 2.2.10
2018-06-15 16:02:27 +02:00
Philip Prindeville
e39a0a9212
Merge pull request #6120 from wigyori/for-15.05-perl
CC: perl5: upgrade 3 CPAN packages to fix build
2018-05-29 19:00:15 -06:00
Thomas Heil
074bb2166e
Merge pull request #6126 from wigyori/for-15.05-pcre_nginx
CC: pcre: bump to 8.41 and fix CVEs
2018-05-25 13:52:53 +02:00
Zoltan HERPAI
1657a09a2d freeradius2: bump to 2.2.10
- Fix multiple security issues. See http://freeradius.org/security/fuzzer-2017.html Thanks to Guido Vranken for working with us to discover the issues and test the fixes.
 - FR-GV-207 Avoid zero-length malloc() in data2vp().
 - FR-GV-206 correct decoding of option 60.
 - FR-GV-205 check for "too long" WiMAX options.
 - FR-GV-204 free VP if decoding fails, so we don't leak memory.
 - FR-GV-203 fix memory leak when using decode_tlv().
 - FR-GV-202 check for "too long" attributes.
 - FR-GV-201 check input/output length in make_secret().
 - FR-AD-001 Use strncmp() instead of memcmp() for bounded data.
 - Disable in-memory TLS session caches due to OpenSSL API issues.
 - Allow issuer_cert to be empty.
 - Look for extensions using correct index.
 - Fix types.
 - Work around OpenSSL 1.0.2 problems, which cause failures in TLS-based EAP methods.
 - Revert RedHat contributed bug which removes run-time checks for OpenSSL consistency.
 - Allow OCSP responder URL to be later in the packet Fix by Ean Pasternak.
 - Catch empty subject and non-existent issuer cert in OCSP Fix by Ean Pasternak.
 - Allow non-FIPS for MD5 Fix by Ean Pasternak.

Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2018-05-24 01:35:09 +02:00
Daniel Golle
520ac45ca8 freeradius2: update to version 2.2.9
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2018-05-24 01:35:06 +02:00
Thomas Heil
27133d6866 pcre: Added fix for CVE-2017-11164 by adding stack recursion limit
Signed-off-by: Thomas Heil <heil@terminal-consulting.de>
2018-05-24 01:32:52 +02:00
Thomas Heil
7ff17dd5a3 pcre: upgrade to version 8.41 - fixes security issues
Signed-off-by: Thomas Heil <heil@terminal-consulting.de>
2018-05-24 01:32:48 +02:00
Thomas Heil
a83284d7bd fix CVE-2017-7186 Fix CVE-2017-7186 mentioned in https://bugs.exim.org/show_bug.cgi?id=2052
Signed-off-by: Thomas Heil <heil@terminal-consulting.de>
2018-05-24 01:32:44 +02:00
heil
5c64d6a6d3 package: pcre bump to version 8.40
Signed-off-by: heil <heil@terminal-consulting.de>
2018-05-24 01:32:40 +02:00
Zoltan HERPAI
9232d123e4 perl-uri: bump to 1.74
Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2018-05-24 01:19:23 +02:00
Zoltan HERPAI
86f8d58ad0 perl-html-parser: bump to 3.72
Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2018-05-24 01:19:20 +02:00
Zoltan HERPAI
f0755b41ef perl-dbi: bump to 1.641
Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2018-05-24 01:19:18 +02:00
Jiri Slachta
8d98c0501a
Merge pull request #5542 from micmac1/jiri-for-15.05
libssh2, libxslt, tiff: security bumps (for 15.05)
2018-01-30 20:00:45 +01:00
Sebastian Kemper
bdfe75a5cd tiff: version bump to address open CVEs
- Bumps version to 4.0.9. Otherwise about two dozen packages would need
  to be backported. There were no ABI/API changes between 4.0.3 and
  4.0.9, so this is OK.
- Adds a patch from Jow that addresses a macro issue (already in
  master/lede-17.01)
- Adds patches copied from Debian for CVE-2017-18013 and CVE-2017-9935
  on top.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2018-01-30 15:32:49 +01:00
Sebastian Kemper
7d2337a17f libxslt: revision bump to address open CVEs
- Add patches copied from Debian to address open CVEs
- Update mail address of maintainer
- Fix a typo
- Add --disable-silent-rules for verbose build output

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2018-01-30 15:28:35 +01:00
Sebastian Kemper
f84cc525d6 libssh2: revision bump to fix CVE-2016-0787
- adds patch copied from Debian to address CVE
- fixes zlib detection
- changes http to https links
- updates maintainer's mail address

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2018-01-30 15:25:25 +01:00
Zoltan Herpai
2b8f946204
Merge pull request #5084 from wigyori/for-15.05-irssi
CC: net/irssi: upgrade irssi, update download URL
2018-01-29 09:20:09 +01:00
Zoltan Herpai
f3e4493e0b
Merge pull request #5102 from wigyori/for-15.05-xupnpd
CC: multimedia/xupnpd: move download source and upgrade to 2016-07-06
2018-01-29 09:19:18 +01:00
Zoltan Herpai
318af6607d
Merge pull request #5151 from wigyori/for-15.05-bluez
CC: bluez: upgrade to 5.47
2018-01-29 09:10:29 +01:00
Marko Ratkaj
2543a12a60
Merge pull request #5114 from wigyori/for-15.05-squid
CC: squid: upgrade to 3.5.27
2018-01-24 20:23:49 +01:00
Zoltan Herpai
e5f16da2ec
Merge pull request #5233 from wigyori/for-15.05-bind
CC: bind: bump to 9.11.2
2017-12-07 10:49:26 +01:00
Zoltan HERPAI
2f28404a93 bind: bring back PKG_MD5SUM for CC
Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2017-12-06 21:23:26 +01:00
Philip Prindeville
bc8a2ff329 bind: version update to 9.11.2
Also refresh patches and dependencies.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2017-11-19 17:36:53 +01:00
Noah Meyerhans
ed10cd0c39 bind: Update to 9.10.5-P3
New upstream release includes fixes for the following security issues:

 * CVE-2017-3140: With certain RPZ configurations, a response with TTL 0 could
   cause named to go into an infinite query loop
 * CVE-2017-3142: An error in TSIG handling could permit unauthorized zone
   transfers or zone updates.
 * CVE-2017-3143: An error in TSIG handling could permit unauthorized zone
   transfers or zone updates.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2017-11-19 17:34:15 +01:00
Sami Olmari
e2cd2f2b3c bind: Include dnssec-settime in bind-dnssec/tool
<net/bind>

Maintainer: @nmeyerhans
Compile tested: x86_64, OpenWRT 50107
Run tested: x86 / 64, OpenWRT 50107

Description:

Added dnssec-settime into bind-dnssec and bind-tools

Signed-off-by: Sami Olmari <sami+git@olmari.fi>
2017-11-19 17:34:05 +01:00
Noah Meyerhans
f648f3766f bind: Update to bind-9.10.5
This change includes fixes for several security issues:

  * CVE-2017-3138: rndc "" could trigger an assertion failure in named.
  * CVE-2017-3137: Some chaining (i.e., type CNAME or DNAME) responses to
    upstream queries could trigger assertion failures.
  * CVE-2017-3136: dns64 with break-dnssec yes; can result in an assertion
    failure.
  * CVE-2017-3135: If a server is configured with a response policy zone
    (RPZ) that rewrites an answer with local data, and is also configured
    for DNS64 address mapping, a NULL pointer can be read triggering a
    server crash.
  * CVE-2016-9444: named could mishandle authority sections with missing
    RRSIGs, triggering an assertion failure.
  * CVE-2016-9131: named mishandled some responses where covering RRSIG
    records were returned without the requested data, resulting in an
    assertion failure.
  * CVE-2016-9131: named incorrectly tried to cache TKEY records which could
    trigger an assertion failure when there was a class mismatch.
  * CVE-2016-8864: It was possible to trigger assertions when processing
    responses containing answers of type DNAME.
  * CVE-2016-6170: Added the ability to specify the maximum number of
    records permitted in a zone (max-records #;). This provides a mechanism
    to block overly large zone transfers, which is a potential risk with
    slave zones from other parties.
  * CVE-2016-2776: It was possible to trigger an assertion when rendering a
    message using a specially crafted request.
  * CVE-2016-2775: Calling getrrsetbyname() with a non absolute name could
    trigger an infinite recursion bug in lwresd or named with lwres
    configured if, when combined with a search list entry from resolv.conf,
    the resulting name is too long.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2017-11-19 17:33:49 +01:00
Noah Meyerhans
556c80b16f bind: update to bind-9.10.4-P5
This change fixes multiple denial-of-service vulnerabilities:
 * CVE-2016-9131: A malformed response to an ANY query can cause an
   assertion failure during recursion
 * CVE-2016-9147: An error handling a query response containing
   inconsistent DNSSEC information could cause an assertion failure
 * CVE-2016-9444: An unusually-formed DS record response could cause
   an assertion failure
 * CVE-2016-9778: An error handling certain queries using the
   nxdomain-redirect feature could cause a REQUIRE assertion failure
   in db.c

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2017-11-19 17:33:33 +01:00
Stijn Tintel
bd048aabb8 bind: disable libjson support
If libjson-c is detected during bind-libs configure phase, bind-libs
will be built with libjson support. This results in a missing dependency
error during install phase. Solve this by disabling libjson support.
2017-11-19 17:32:03 +01:00
Noah Meyerhans
cc6555e1d9 bind: set sysconfdir to /etc/bind
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2017-11-19 17:31:47 +01:00
Zoltan Herpai
e6ff63036d
Merge pull request #5081 from wigyori/for-15.05-mxml3
CC: upgrade mxml, update download URL
2017-11-18 21:18:41 +01:00
Zoltan Herpai
5fe8c6140e
Merge pull request #5103 from wigyori/for-15.05-wifidog
CC: wifidog: upgrade to 1.3.0 to fix build
2017-11-18 21:14:31 +01:00
Hirokazu MORIKAWA
e19f2e5c97 bluez: bump to 5.47 fix CVE-2017-1000250
http://www.bluez.org/release-of-bluez-5-47/

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2017-11-18 13:05:28 +01:00
Álvaro Fernández Rojas
8b99eb30b7 bluez: update to v5.38
Fixes https://github.com/openwrt/packages/issues/2523
Closes https://github.com/openwrt/packages/pull/2545

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
2017-11-18 13:03:31 +01:00
Álvaro Fernández Rojas
506b35e97d bluez: Add support for Raspberry Pi 3
- Adds bcm43xx-3wire variant.
- Resets UART speed after firmware download.
- Prints chip name when firmware isn't found for bcm43xx.
- Increases timeout for bcm43xx.
- Moves bcm43xx firmware to lib.

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
2017-11-18 13:03:26 +01:00
Álvaro Fernández Rojas
f325fafa21 bluez: update to v5.37
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
2017-11-18 13:03:22 +01:00
Hauke Mehrtens
b4a4c1e4bf bluez: update to version 5.33
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-11-18 13:03:18 +01:00
Hauke Mehrtens
f4665c4ae4 bluez: update to version 5.31
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-11-18 13:03:11 +01:00
Hauke Mehrtens
c2fb968f02 bluez: add btmgmt tool
The btmgmt tool is needed to activate BL LE support.
Currently it is not installed.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-11-18 13:03:06 +01:00
Bruno Randolf
dde94d75d1 bluez: Add bluez-daemon package
Move bluetoothd and related programs and files from bluez-utils into
bluez-daemon package. The main motivation for this is to remove the dependency
to DBus from bluez-utils. The utilities like "hcitool" are useful without it.

Also add kmod-bluetooth dependency to bluez-utils, as the utils don't make much
sense without bluetooth support in the kernel.

Signed-off-by: Bruno Randolf <br1@einfach.org>
2017-11-18 13:03:00 +01:00
Zoltan Herpai
49f5ad1706
Merge pull request #5086 from wigyori/for-15.05-fdm2
CC: mail/fdm: update download URL
2017-11-18 12:58:16 +01:00
Zoltan Herpai
765b738db7
Merge pull request #5099 from wigyori/for-15.05-taskwarrior
CC: utils/taskwarrior: upgrade to 2.4.4
2017-11-18 12:57:57 +01:00
Zoltan Herpai
51a5745910
Merge pull request #5095 from wigyori/for-15.05-perl
CC: upgrade a couple perl packages
2017-11-18 12:57:41 +01:00
Zoltan Herpai
b017b246df
Merge pull request #5101 from wigyori/for-15.05-tor
CC: net/tor: fix build and upgrade to 0.2.9.11
2017-11-18 12:57:25 +01:00
Michael Heimpold
345cb4d509
Merge pull request #5108 from wigyori/for-15.05-php
CC: php: upgrade to 5.6.32

LGTM2, thanks.
2017-11-13 20:18:55 +01:00
Thomas Heil
5df3860f23
Merge pull request #5111 from wigyori/for-15.05-nginx
CC: nginx: upgrade to 1.12.1
2017-11-13 10:28:25 +01:00
Zoltan Herpai
9faf1ea30c
Merge pull request #5080 from wigyori/for-15.05
CC: update download URLs for various packages
2017-11-13 07:24:45 +01:00
Zoltan Herpai
330f86da51
Merge pull request #5078 from wigyori/for-15.05-neon
CC: upgrade libs/neon
2017-11-13 07:22:58 +01:00
Zoltan Herpai
d2a404bf3c
Merge pull request #5094 from wigyori/for-15.05-pianod
CC: fix pianod build
2017-11-13 07:20:47 +01:00
Marko Ratkaj
9b772a50db squid: bump to 3.5.27
Bump Squid to version 3.5.27 and fix broken menuconfig menu.

Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
2017-11-12 23:38:23 +01:00
Adam Gensler
3e972a57c6 net/squid: Allow squid to parse mime.conf
Copy mime.conf to temporary directory so squid process can properly read the file. Without it squid cannot access mime.conf and throws a warning during startup.

Signed-off by: Adam Gensler <openwrt@a.gnslr.us>
2017-11-12 23:14:26 +01:00
Zoltan Herpai
bb39456e41
Merge pull request #5098 from wigyori/for-15.05-stunnel
CC: net/stunnel: fix download source and upgrade
2017-11-12 22:50:48 +01:00
Zoltan Herpai
de8dc83895
Merge pull request #5093 from wigyori/for-15.05-libupnpp
CC: upmpdcli/libupnpp upgrade
2017-11-12 21:57:56 +01:00
Zoltan Herpai
4b422023d7
Merge pull request #5112 from wigyori/for-15.05-sshfs
CC: sshfs: upgrade to 2.10
2017-11-12 21:44:52 +01:00
Zoltan HERPAI
942ad75e91 sshfs: upgrade to 2.10
Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2017-11-12 20:57:16 +01:00
Thomas Heil
5db5399040 nginx: update lua-nginx to cdd2ae921f67bf396c743406493127be496e57ce
- fixes lua compilation issue

Signed-off-by: Thomas Heil <heil@terminal-consulting.de>
2017-11-12 19:25:00 +01:00
Uwe Arnold
5837dfeb11 nginx: update to 1.12.1
Fixes: CVE-2017-7529

remove PKG_MD5SUM as it is deprecated

Signed-off-by: Uwe Arnold <donvipre@gmail.com>
2017-11-12 19:15:49 +01:00
Val Kulkov
90075956d2 nginx: update to 1.12.0, the latest stable version
This is a straightforward update to the latest stable version.

Signed-off-by: Val Kulkov <val.kulkov@gmail.com>
2017-11-12 19:15:45 +01:00
Val Kulkov
066f648fb1 nginx: update to 1.10.3, add new module options
Update nginx to version 1.10.3.

Add new configuration options to enable the following optional
modules (disabled by default):
   - http_auth_request_module
   - http_v2_module
   - http_realip_module
   - http_secure_link_module

Signed-off-by: Val Kulkov <val.kulkov@gmail.com>
2017-11-12 19:15:39 +01:00
heil
a7ee240daa nginx: bump version to latest stable 1.10.2
Signed-off-by: heil <heil@terminal-consulting.de>
2017-11-12 19:15:33 +01:00
Xotic750
055ac44d0b nginx: Bumped nginx-naxsi to v0.54
Signed-off-by: Graham Fairweather <xotic750@gmail.com>
2017-11-12 19:15:27 +01:00
Xotic750
15c041ac25 nginx: Bumped to v1.10.1
fixes NULL pointer dereference while writing client request body vulnerability (CVE-2016-4450).

Signed-off-by: Graham Fairweather <xotic750@gmail.com>
2017-11-12 19:15:20 +01:00
Dirk Feytons
63037f9ae4 nginx: change start level to 80
Signed-off-by: Dirk Feytons <dirk.feytons@gmail.com>
2017-11-12 19:15:14 +01:00
Dirk Feytons
8fdd1db9d3 nginx: correct f3c7cc6
Signed-off-by: Dirk Feytons <dirk.feytons@gmail.com>
2017-11-12 19:15:07 +01:00
heil
a529b679a3 nginx: correct errors from previous merge
Signed-off-by: heil <heil@terminal-consulting.de>
2017-11-12 19:14:26 +01:00
Dirk Feytons
0912175ec1 nginx: upstep to 1.10.0, add Lua module, footprint optimizations
Signed-off-by: Dirk Feytons <dirk.feytons@gmail.com>
2017-11-12 19:14:14 +01:00
heil
a387117a2a nginx: bump to version 1.9.13
Signed-off-by: heil <heil@terminal-consulting.de>
2017-11-12 18:43:10 +01:00
heil
67a9f67cc4 nginx: add naxsi module
- this brings back naxsi support aka WAF for nginx

Signed-off-by: heil <heil@terminal-consulting.de>
2017-11-12 18:43:05 +01:00
Dirk Feytons
13021781b4 nginx: upstep to 1.9.9
Signed-off-by: Dirk Feytons <dirk.feytons@gmail.com>
2017-11-12 18:42:59 +01:00
Luka Perkov
d44b07c279 nginx: bump to 1.9.6
In this bump as agreed with Thomas we are dropping out all the nginx 3rd party
addons. In case you would like to see your 3rd party addon included please send
a pull request and make sure it works with newest version.

Signed-off-by: Luka Perkov <luka@openwrt.org>
2017-11-12 18:42:54 +01:00
Paul Fertser
3c7b3d57dd nginx: add support for SPNEGO authentication
This adds a module suitable for Kerberos SSO, e.g. for integrating
into Active Directory domains.

Signed-off-by: Paul Fertser <fercerpav@gmail.com>
2017-11-12 18:42:49 +01:00
heil
ec14ed490a nginx: fix musl compatibility
- include Patches according to issue #1129
 - refresh Makefile

Signed-off-by: heil <heil@terminal-consulting.de>
2017-11-12 18:42:45 +01:00
Nuno Goncalves
b4b69ca9c5 rtklib: fix repository and bump version (fixes #3212)
Signed-off-by: Nuno Goncalves <nunojpg@gmail.com>
2017-11-12 09:38:00 +01:00
Nuno Goncalves
2930345a7b rtklib: bump version to 2.4.2 p11, close #1624
Signed-off-by: Nuno Goncalves <nunojpg@gmail.com>
2017-11-12 09:38:00 +01:00
Zoltan HERPAI
4273641178 php5: bump to 5.6.32
Fixes since 5.6.26:
 - ton of bugs
 - CVE-2016-9933
 - CVE-2016-9934
 - CVE-2016-9935
 - CVE-2016-10158
 - CVE-2016-10167
 - CVE-2016-10168
 - CVE-2016-10159
 - CVE-2016-10160
 - CVE-2016-10161
 - CVE-2017-7890
 - CVE-2017-9224
 - CVE-2017-9226
 - CVE-2017-9227
 - CVE-2017-9228
 - CVE-2017-9229
 - CVE-2016-1283

Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2017-11-10 22:12:34 +01:00
Michael Heimpold
b8a8d398de php5: update to 5.6.26
This fixes the following CVEs:
 - in intl: CVE-2016-7416
 - in mysqlnd: CVE-2016-7412
 - in phar: CVE-2016-7414
 - in spl: CVE-2016-7417
 - in standard: CVS-2016-7411
 - in wddx: CVE-2016-7413, CVE-2016-7418

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2017-11-10 20:31:31 +01:00
Michael Heimpold
0897526541 php5: update to 5.6.25
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2017-11-10 20:31:25 +01:00
Michael Heimpold
48b402eb65 php5: update to 5.6.23
This fixes the following CVEs:
 - in GD: CVE-2015-8874, CVE-2016-5766, CVE-2016-5767
 - in mbstring: CVE-2016-5768
 - in mcrypt: CVE-2016-5769
 - in SPL: CVE-2016-5770, CVE-2016-5771
 - in WDDX: CVE-2016-5772
 - in zip: CVE-2016-5773

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2017-11-10 20:31:20 +01:00
Michael Heimpold
01e3a2fe18 php5: update to 5.6.21
This fixes the following CVEs:
 - in BCMath: CVE-2016-4537, CVE-2016-4538
 - in EXIF: CVE-2016-4542, CVE-2016-4543, CVE-2016-4544
 - in GD: CVE-2016-3074
 - in Intl: CVE-2016-4540, CVE-2016-4541
 - in XML: CVE-2016-4539

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2017-11-10 20:31:15 +01:00
Michael Heimpold
eb71734dba php5: add mod_intl (resolves #2620)
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2017-11-10 20:31:08 +01:00
Michael Heimpold
9b44ecc86f php5: update to 5.6.19
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2017-11-10 20:31:00 +01:00
Michael Heimpold
11ed11780d php5: update to 5.6.18
Note: Upstream tagged this as security release.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2017-11-10 20:30:55 +01:00
Álvaro Fernández Rojas
db651ddd85 xupnpd: update to latest version
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
2017-11-10 20:09:30 +01:00
kuoruan
cdf268a8be xupnpd: Update to 2016-05-11
* Change source url to GitHub
* Update to 2016-05-11
* Add LICENSE
* Edit Makefile

Signed-off-by: Hsing-Wang Liao <kuoruan@gmail.com>
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
2017-11-10 20:09:21 +01:00
Michael Haas
3df25df858 wifidog: Bump to 1.3.0
* Updates wifidog to latest upstream release.
* Removes patches/100-musl-compat.patch as that's included in 1.3.0

Signed-off-by: Michael Haas <haas@computerlinguist.org>
2017-11-10 18:39:13 +01:00
Jo-Philipp Wich
eb0de8f114 wifidog: fix musl compatibility
- Fix missing `fcntl.h` in `protocol.c`
 - Replace nonstandard `sys/unistd.h` includes with `unistd.h` ones

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
2017-11-10 18:39:08 +01:00
Daniel Golle
481a8850ff
Merge pull request #5100 from wigyori/for-15.05-tracertools
CC: tracertools: use new git HEAD
2017-11-10 18:26:32 +01:00
Daniel Golle
0f854ba5fe tracertools: use new git HEAD
gitorious archive became available, so I could import the project
history from there into the new repo on github. Rebasing the changes
made since 2014 on top of the original git tree obviously caused
the commit hashes to differ.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2017-11-10 14:53:26 +01:00
Daniel Golle
852570e41e tracertools: update source, fixes bug on little-endian systems
and improves collectd support

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2017-11-10 14:53:08 +01:00
Daniel Golle
b4b62a17e7 tracertools: update source
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2017-11-10 14:53:02 +01:00
Hauke Mehrtens
e37a60ef3a tor: update to version 0.2.9.11
This fixes CVE-2017-0376

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-11-10 14:07:34 +01:00
Hauke Mehrtens
7d5da97506 tor: update to version 0.2.9.10
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-11-10 14:07:29 +01:00
Hauke Mehrtens
83dba23e0a tor: update to version 0.2.9.9
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-11-10 14:07:22 +01:00
Hauke Mehrtens
b05cb4e4bd tor: log to syslog by default
Make tor log to syslog by default instead of stdout.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-11-10 14:07:13 +01:00
Hauke Mehrtens
e6ea3339fe tor: add tor-gencert, tor-resolve and torify
These are some additional applications build by the tor package.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-11-10 14:07:04 +01:00
Hauke Mehrtens
5228fe11d8 tor: add geoip6 to tor-geoip
This add the IPv6 addresses to the tor-geoip6 package.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-11-10 14:06:56 +01:00
Hauke Mehrtens
4001649ed5 tor: preserve tor keys over sysupgrade
Mark the directories containing the keys for hidden services as
conffiles to preserve them over sysupgrade.

Fixes: #2247

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-11-10 14:06:47 +01:00
Hauke Mehrtens
88e4f98f2c tor: update to version 0.2.9.8
In addition update some configure options and use EXTRA_CFLAGS.
Setting RunAsDaemon to 1 will be overwritten by the init script option
"--runasdaemon 0" anyway and we want it in foreground for procd.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-11-10 14:06:32 +01:00
Hauke Mehrtens
030c7796ef tor: update to version 0.2.8.11
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-11-10 14:05:50 +01:00
Nima Fatemi
aa224c9ae1 Tor: update to 0.2.8.9
- update to 0.2.8.9
    - use sha256 instead of md5 for integrity check
    - add dependency: libcap

signed-off-by: Nima Fatemi <nima@torproject.org>
2017-11-10 14:05:39 +01:00
Felix Fietkau
e02b4a7793 tor: add missing zlib dependency
Signed-off-by: Felix Fietkau <nbd@nbd.name>
2017-11-10 14:05:25 +01:00
Karl Palsson
37b5a5761e tor: correct URL for dist downloads
Original url was 404.
Fixes Github issue #2284
2017-11-10 14:05:16 +01:00
Jeffery To
da2c8cc672 tor: remove tor-fw-helper
The "internal pure-C" tor-fw-helper was removed in 0.2.7.5. This removes
the tor-fw-helper package and references to its dependencies.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2017-11-10 14:05:03 +01:00
Luka Perkov
b24f68ead8 taskwarrior: update to 2.4.4
Signed-off-by: Luka Perkov <luka@openwrt.org>
2017-11-10 13:41:46 +01:00
Zoltan HERPAI
0396883a08 stunnel: use archive/ as download source
Anything below 5.43 is archived, update download source
to use paths accordingly.

Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2017-11-10 13:19:14 +01:00
Felix Fietkau
1c9d3861d8 stunnel: add missing zlib dependency
Signed-off-by: Felix Fietkau <nbd@nbd.name>
2017-11-10 12:12:06 +01:00
Michael Haas
c544adacd4 stunnel: Update from 5.14 to 5.20
* 010_fix_getnameinfo.patch is no longer needed
* 011-cron-without-pthread-fix.patch added, fixes incorrect
  ifdef when building without pthreads

Signed-off-by: Michael Haas <haas@computerlinguist.org>
2017-11-10 12:11:59 +01:00
Zoltan HERPAI
c11b79a127 stm32flash: move download source
code.google is not available anymore, move to use SF.

Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2017-11-10 12:05:57 +01:00
Zoltan HERPAI
becd747c1a net/sslh: move download source
The old download source was pulled from the net, move to github.

Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2017-11-10 12:04:52 +01:00
Dirk Neukirchen
92fa2b3895 squid: disable krb5
- fix build error reported by buildbot by disabling krb5
- libcom_err from krb5 is used - configure output:
configure: WARNING: library 'com_err' is required for Heimdal Kerberos
- krb5 has its own libcom_err (see krb5 package) with its own symbols

- linking with wrong libcom_err from libext2fs produces errors during
libgssapi_krb5.so: undefined reference to `error_message@com_err_3_MIT'
libgssapi_krb5.so: undefined reference to `remove_error_table@com_err_3_MIT'
libgssapi_krb5.so: undefined reference to `add_error_table@com_err_3_MIT'
-> remove libext2fs dependency (wasnt working anyway - no PKG_BUILD_DEP)

Signed-off-by: Dirk Neukirchen <dirkneukirchen@web.de>
2017-11-09 23:33:36 +01:00
Daniel Golle
c465fdc5f8 squid: build-depend on libext2fs
squid uses libcom_err, a static library provided by libext2fs

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2017-11-09 23:33:33 +01:00
Zoltan HERPAI
86ff9a70f1 snort: update download source
2.9.7.2 was moved into the archive section, update
source accordingly until someone upgrades it.

Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2017-11-09 22:54:14 +01:00
Noah Meyerhans
6f06eb2e70 bind: update to 9.10.4-p4
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2017-11-09 21:00:41 +01:00
Noah Meyerhans
374eea23e2 bind: Set PKG_USE_MIPS16:=0 2017-11-09 21:00:25 +01:00
Noah Meyerhans
c2b892b145 bind: Update to 9.9.9-p3 for CVE-2016-2776
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2017-11-09 21:00:13 +01:00
Zoltan HERPAI
61df1559b8 net/bind: PKG_RELEASE increased
Signed-off-by: DonkZZ <donk@evhr.net>
2017-11-09 20:59:27 +01:00
DonkZZ
41a87a5ce5 net/bind: Update db.root
The contents of the file "db.root" is very old (12 years).
Here's a new version downloaded from ftp://ftp.internic.net/domain/

Signed-off-by: DonkZZ <donk@evhr.net>
2017-11-09 20:58:03 +01:00
DonkZZ
3497b7239d net/bind: Little cleaning in named.init
The variable "config_file" appears twice.

Signed-off-by: DonkZZ donk@evhr.net
2017-11-09 20:57:55 +01:00
Noah Meyerhans
fae7df9e66 bind: Update to 9.9.8-P4 to resolve CVE-2016-1285 and CVE-2016-1286
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2017-11-09 20:57:38 +01:00
Zoltan HERPAI
f297f6e6c9 perl-dbi: bump to 1.634
As the previous sources were pulled from the net, bump to this
version.

Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2017-11-09 19:50:29 +01:00
Zoltan HERPAI
3656eb5464 perl-www-mechanize: bump to 1.75
As the previous sources were pulled from the net, bump to this
version.

Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2017-11-09 19:49:50 +01:00
Zoltan HERPAI
f4fb3ca8be perl-uri: bump to 1.71
As the previous sources were pulled from the net, bump to this
version.

Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2017-11-09 19:49:06 +01:00
Ted Hess
97c5e0f881 pianod: Remove svn version check from builds
Signed-off-by: Ted Hess <thess@kitschensync.net>
2017-11-09 19:46:42 +01:00
Ted Hess
3d8da2bef4 pianod: Fix build/download order
Signed-off-by: Ted Hess <thess@kitschensync.net>
2017-11-09 19:46:39 +01:00
Ted Hess
9b20566068 pianod: Update to latest version, refresh patches
Signed-off-by: Ted Hess <thess@kitschensync.net>
2017-11-09 19:46:34 +01:00
John Crispin
614e088393 oggfwd: update download source
upstream changed from git:// to https://

Signed-off-by: John Crispin <john@phrozen.org>
2017-11-09 02:06:48 +01:00
Zoltan HERPAI
e4a06b3679 netperf: move source to use github
With netperf.org's FTP gone, and the main site showing the source
has migrated to github, let's use it.

Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2017-11-09 01:55:57 +01:00
Jo-Philipp Wich
f5294296bf lua-sha2: switch to Github repository
The original Google Code repository is not available anymore, use the
equivalent Github repository instead.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2017-11-09 00:28:41 +01:00
Ted Hess
b839a8a398 upmpdcli/libupnpp: Update to latest versions, refresh patch
upmpdcli: Version 1.1.3
libupnpp: Version 0.14

Signed-off-by: Ted Hess <thess@kitschensync.net>
2017-11-08 18:57:01 +01:00
Petko Bordjukov
96cfc0b597 upmpdcli: Bump version to 0.11.0
upmpdcli 0.11 mainly improves on the Songcast support, in
complement with the changes in sc2mpd. Especially, it now
includes an utility (scctl) and web interface to set up
multi-room Songcast.

Signed-off-by: Petko Bordjukov <bordjukov@gmail.com>
2017-11-08 18:56:26 +01:00
Petko Bordjukov
93bc6b4141 libupnpp: Bump version to 0.11.0
This new version introduces improvements to the OpenHome support.

Signed-off-by: Petko Bordjukov <bordjukov@gmail.com>
2017-11-08 18:56:23 +01:00
Zoltan HERPAI
2a1eddb5ae libuv: move download URL to https
When using IPv6 and http://, the site redirects to https://nodejs.org
which doesn't have the dist sources. IPv4 does not have this problem.
Use https directly.

Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2017-11-08 18:02:59 +01:00
Othmar Truniger
8dad744f51 libesmtp: add ssl support, new upstream URL
Signed-off-by: Othmar Truniger <github@truniger.ch>
2017-11-08 09:11:04 +01:00
Alexander Ryzhov
b26a06f139 libdnet: fix source URL
Signed-off-by: Alexander Ryzhov <openwrt@ryzhov-al.ru>
2017-11-08 01:54:15 +01:00
Peter Wagner
10239ddb25 irssi: update to 0.8.21
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2017-11-08 00:27:27 +01:00
Peter Wagner
d4fec80529 irssi: update to 0.8.20
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2017-11-08 00:27:22 +01:00
Thomas Heil
7b9e2e0208
Merge pull request #5079 from wigyori/for-15.05-crtmpd
CC: multimedia/crtmpserver: fix build
2017-11-08 00:10:17 +01:00
Zoltan HERPAI
fe0f06b627 fdm: update download URL
Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2017-11-07 23:27:46 +01:00
Zoltan HERPAI
72f1aa450c mxml: update download URL
Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2017-11-07 23:10:38 +01:00
ejurgensen
cb070e6182 mxml: Update to version 2.10
Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>
2017-11-07 23:10:24 +01:00
ejurgensen
639241d79d mxml: update to 2.9
Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>
2017-11-07 23:10:22 +01:00
Zoltan HERPAI
b9260db2fe neon: upgrade to 0.30.2
Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2017-11-07 20:28:33 +01:00
Felix Fietkau
adf193882d neon: add missing dependency on zlib
Signed-off-by: Felix Fietkau <nbd@nbd.name>
2017-11-07 20:27:06 +01:00
Michal Hrušecký
75db8c3422 crtmpserver: Disable apple streaming to fix build
Apple streaming is quite broken so disabling it to make package building again.

Signed-off-by: Michal Hrušecký <Michal.Hrusecky@nic.cz>
2017-11-07 18:08:56 +01:00
Jo-Philipp Wich
fcf8f36e9b crtmpserver: fix multiple issues
- Switch download to the Github clone of crtmpserver
 - Rebase patches against latest version
 - Pregenerate version.h file
 - Disable applestreamingclient as it is broken

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2017-11-07 18:08:11 +01:00
Zoltan HERPAI
d23ac5b749 apache: fix download URL
Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2017-11-07 16:50:25 +01:00
Zoltan HERPAI
861881c635 apr: fix download URL
Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2017-11-07 16:50:16 +01:00
Zoltan HERPAI
c73482d074 postgresql: fix download URL
Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2017-11-07 16:49:54 +01:00
Ted Hess
f15b0ace72
Merge pull request #5042 from kishangondaliya/libsodium
[For-15.05] libsodium: Fix download url
2017-11-03 07:11:36 -04:00
Kishan Gondaliya
356436f9bd libsodium: Fix download url
Signed-off-by: Kishan Gondaliya <kishanpgondaliya@gmail.com>
2017-10-31 13:46:19 +05:30
champtar
c52b6f8a0e Merge pull request #3562 from MikePetullo/for-15.05-krb5
krb5: install include properly and leave libcom_err* in place
2017-07-15 16:57:57 -07:00
Hannu Nyman
b5f471857b Merge pull request #4127 from gstrauss/lighttpd-for-15.05
Lighttpd for 15.05
2017-04-08 10:30:35 +03:00
Glenn Strauss
d1433a582c lighttpd: add new modules, upd URLs, add restart()
(with feedback from @hnyman and patch additions from @MikePetullo)

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2017-03-22 18:09:44 -04:00
Rafał Miłecki
e71771676c lighttpd: fix regression in local-redir used with url.rewrite-once
This fixes upstream regression introduced in 1.4.40. It was reported &
debugged in https://redmine.lighttpd.net/issues/2793
This fix is queued for 1.4.46 in the personal/gstrauss/master upstream
branch.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
2017-03-08 12:34:35 -05:00
Rafał Miłecki
bec3da9759 lighttpd: update to 1.4.45
Update to 1.4.42 introduced a problem with starting lighttpd as
OpenWrt/LEDE service. It was stopping whole init process at sth like:
  783 root      1124 S    {S50lighttpd} /bin/sh /etc/rc.common /etc/rc.d/S50lighttpd boot
  799 root      1164 S    /usr/sbin/lighttpd -f /etc/lighttpd/lighttpd.conf

It was hanging until getting random pool:
[  176.340007] random: nonblocking pool is initialized
and then immediately the rest of init process followed:
[  176.423475] jffs2_scan_eraseblock(): End of filesystem marker found at 0x0
[  176.430754] jffs2_build_filesystem(): unlocking the mtd device... done.
[  176.437615] jffs2_build_filesystem(): erasing all blocks after the end marker... done.

This was fixed in 1.4.44, but bump directly to 1.4.45 while at it.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
2017-03-08 12:34:35 -05:00
W. Michael Petullo
1792f0f6b9 lighttpd: add option to build mod_authn_file.so
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2017-03-08 12:34:35 -05:00
Hannu Nyman
9dfbb0bce3 Merge pull request #4061 from EricLuehrsen/trust_anchor_15_05
[for-15.05] unbound: DNSSEC trust anchor roll for 2017
2017-02-26 19:47:20 +02:00
Eric Luehrsen
b166e66556 unbound: DNSSEC trust anchor roll for 2017
Carry both the 2010 and 2017 DS records until 2018.
Unbound complies with RFC5011 but fresh installs
need these anchors to get started.
https://www.icann.org/resources/pages/ksk-rollover
https://www.iana.org/domains/root

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>
2017-02-22 22:25:09 -05:00
Nikos Mavrogiannopoulos
592f849b5e ocserv: updated to 0.11.7
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2017-02-12 10:31:55 +01:00
Nikos Mavrogiannopoulos
2887c2c10f ocserv: explicitly disable lz4 building
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2017-02-12 10:30:26 +01:00
Hannu Nyman
be2609dae1 Merge pull request #3973 from chris5560/for-15.05
[for-15.05] ddns-scripts: New update url for service duiadns.net
2017-02-09 22:56:12 +02:00
Christian Schoenebeck
befb3e65c1 [for-15.05] ddns-scripts: New update url for service duiadns.net
- new update url for service "duiadns.net" #3969
- updated public_suffix_list.dat

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
2017-02-09 21:49:05 +01:00
Ted Hess
3cb2cd7b5a Merge pull request #3880 from chris5560/for-15.05
[for-15.05] ddns-scripts: backport of 2.7.6-12
2017-01-20 14:31:45 -05:00
Christian Schoenebeck
1fd8ad1f6f [for-15.05] ddns-scripts: backport of 2.7.6-12
- fix detecting local ip from ip command #3834 and https://forum.lede-project.org/t/bugs-in-ddns-scripts/1000
- updated public_suffix_list.dat
- minor fixes to services files

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
2017-01-18 21:54:55 +01:00
Hannu Nyman
7f2618d2d5 Merge pull request #3829 from chris5560/for-15.05
[For 15.05] ddns-scripts: Backport of current version 2.7.6-11
2017-01-12 22:34:36 +02:00
Christian Schoenebeck
76b15db6c3 [for-15.05] ddns-scripts: backport of 2.7.6-11
fix problem with detecting ip from nslookup

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
2017-01-12 19:26:33 +01:00
Christian Schoenebeck
728f37ad15 [for-15.05] ddns-scripts: backport of 2.7.6-10
Backport of current version 2.7.6-10
- more services
- more functionality
- be prepared for next versions

compiled ipk-packages available at
https://github.com/chris5560/OpenWrt-Backports/tree/master/for-CC15.05.01/ddns-scripts_2.7.6-10

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
2017-01-11 17:05:05 +01:00
Stijn Tintel
61fad8538b Merge pull request #3323 from SvenRoederer/feature/add_snmp-mibs_for-15.05
net-snmp: [backport-15.05] add package snmp-mibs
2017-01-06 02:59:29 +01:00
Sven Roederer
259c96a1bc net-snmp: add package snmp-mibs
this installs the default MIBS-files under /usr/share/snmp/mibs .
Also aligns the defines to the same sorting-scheme.

backport of daeb5fd506

Signed-off-by: Sven Roederer <devel-sven@geroedel.de>
2017-01-05 22:34:24 +01:00
Dirk Brenken
1a64129034 adblock: update to 1.5.4
Apply adblock updates 1.5.3-1.5.4

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Original commit messages:

adblock: update 1.5.3
* make wget check more flexible,
  fix for broken wget package installations

adblock: bugfix 1.5.4
* CC/uclient-fetch compatibility fix
2016-11-27 20:31:08 +02:00
Ted Hess
277cefd168 Merge pull request #3576 from mchsk/for-15.05
libaudiofile: updated source url (v0.3.6)
2016-11-27 10:23:22 -05:00
Marek Sedlak
271e054ef9 libbaudiofile: updated source url to gnome repos (v0.3.6)
Signed-off-by: Marek Sedlak bodka.zavinac@gmail.com
2016-11-27 13:18:07 +01:00
Ted Hess
5515c732ce Merge pull request #3560 from julbrygd/for-15.05
libsodium and dnscrypt-proxy url change for 15.05
2016-11-25 08:50:21 -05:00
W. Michael Petullo
75333c03bb krb5: install include properly and leave libcom_err* in place
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2016-11-24 15:07:08 -05:00
Stephan Conrad
7e15eb3cff dnscrypt-proxy: apended /old to download url for 15.05 branch
Signed-off-by: Stephan Conrad <stephan@conrad.pics>
2016-11-24 13:37:29 +01:00
Stephan Conrad
44d8235d54 libsodium: apended /old to download url for 15.05 branch
Signed-off-by: Stephan Conrad <stephan@conrad.pics>
2016-11-24 13:37:08 +01:00
Hannu Nyman
88ee2a03ef Merge pull request #3524 from luizluca/cc/ruby-update
CC15.05 ruby: bump to 2.2.6
2016-11-21 16:39:33 +02:00
Hannu Nyman
5fff381fe7 Merge pull request #3489 from commodo/for-15.05-backport-python-2.7.12
[for 15.05] python: backport version 2.7.12 to CC
2016-11-21 16:27:23 +02:00
Alexandru Ardelean
6a8f1965a9 python: backport version 2.7.12 to CC
Fixes CVE-2016-5699
  https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-5699

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2016-11-21 15:14:11 +02:00
Luiz Angelo Daros de Luca
9bf001d2c9 ruby: bump to 2.2.6
This release includes new SSL certificates for RubyGems. And, this also
includes about 80 bug fixes after the previous release. See the
http://svn.ruby-lang.org/repos/ruby/tags/v2_2_6/ChangeLog for details.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2016-11-18 03:33:54 -02:00
Nikos Mavrogiannopoulos
022d8a4dc2 ocserv: updated to 0.11.6
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2016-11-16 19:25:03 +01:00
Robbie Cao
8edde98c91 libnfc: switch git repository to github
Signed-off-by: Robbie Cao <robbie.cao@gmail.com>
2016-11-12 02:52:22 -06:00
heil
33380cf7e2 haproxy: revert update commits
- Revert "package haproxy: fix typo for buildvariant nossl"
 - Revert "haproxy: bump to version 1.6.9 mainline and pending patches"

Signed-off-by: heil <heil@terminal-consulting.de>
2016-11-10 18:47:56 +01:00
heil
3e74e44c00 package haproxy: fix typo for buildvariant nossl
Signed-off-by: heil <heil@terminal-consulting.de>
2016-11-10 00:05:03 +01:00
heil
bec6d8fc8d haproxy: bump to version 1.6.9 mainline and pending patches
Signed-off-by: heil <heil@terminal-consulting.de>
2016-11-09 23:45:38 +01:00
Luka Perkov
b3139cf56c Revert "libwebsockets: sync with master version"
This reverts commit e245e2b824.

Signed-off-by: Luka Perkov <luka@openwrt.org>
2016-11-08 13:34:59 +01:00
Hannu Nyman
d0763a235f Merge pull request #3173 from MikePetullo/for-15.05-bogofilter
bogofilter: postfix script now reads bogofilter_dir from bogofilter conf
2016-11-06 13:43:29 +02:00
Luka Perkov
e245e2b824 libwebsockets: sync with master version
Signed-off-by: Luka Perkov <luka@openwrt.org>
2016-11-02 14:01:13 +01:00
Hannu Nyman
e3e9f341e6 Merge pull request #3411 from MikePetullo/for-15.05
lighttpd: update to 1.4.42
2016-10-29 11:29:01 +03:00
W. Michael Petullo
c6415452f5 lighttpd: update to 1.4.42
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2016-10-29 04:24:37 -04:00
Dirk Brenken
ba76867c70 adblock: update 1.5.2
* turris omnia compatibility fix

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 65bcae0986)
2016-10-25 12:43:35 +03:00
Dirk Brenken
d346839750 adblock: update to 1.5.1
Apply adblock updates 1.4.10-1.5.1

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Original commit messages:

adblock: update 1.4.10
- add 'enabled' check to iface hotplug event handler
- decrease startup priority from 99 to 90
- fix tab indentation in config

adblock: update 1.5.0
* add new 'envchk'function to check adblock environment only,
  i.e. check volatile firewall rules or uhttpd instances
  without list updates
* add new optional parm 'adb_loglevel',
  set it to "0" to mute output (print only errors)
* set hotplug priority to '90' as well (missed in the last commit)
* documentation update
* cosmetics

adblock: bugfix 1.5.1
* fix uhttpd detection in tcp 4+6 configurations
2016-10-13 15:59:29 +03:00
Ted Hess
9de3069a94 ffmpeg: Update to 2.6.9, Add patch to fix AAC decoder performance and memory usage (2.7 backport)
Signed-off-by: Ted Hess <thess@kitschensync.net>
2016-09-30 14:48:48 -04:00
Nikos Mavrogiannopoulos
adfaa8e0af ocserv: updated to 0.11.5
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2016-09-27 23:47:35 +02:00
Dirk Brenken
71aedf440b adblock: update to 1.4.9
Apply adblock updates 1.4.8-1.4.9

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Original commit messages:

adblock: update 1.4.8
* enhance the new query function:
   change the regex to find only the relevant blocklist entries
   add a recursive tld search to quickly identify domains for
whitelisting (see documentation)
     better result preparation
* add securemecca as new blocklist source
* documentation update

adblock: update 1.4.9
* refine query function (see online doc)
2016-09-19 15:59:33 +03:00
W. Michael Petullo
00685c2439 bogofilter: postfix script now reads bogofilter_dir from bogofilter conf
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2016-09-14 20:40:54 -04:00
Hannu Nyman
70594d1749 Merge pull request #3166 from MikePetullo/for-15.05-lighttpd
lighttpd: update to 1.4.41
2016-09-14 16:08:00 +03:00
Hannu Nyman
3e8130852f Merge pull request #3164 from MikePetullo/for-15.05-luasec
luasec: update to 0.6
2016-09-14 16:06:21 +03:00
Hannu Nyman
72140fc155 Merge pull request #3165 from MikePetullo/for-15.05-openldap
openldap: update to 2.4.44
2016-09-14 15:56:45 +03:00
W. Michael Petullo
a23e3d0c3a lighttpd: update to 1.4.41
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2016-09-13 23:19:58 -04:00
W. Michael Petullo
25ef6b37f2 openldap: update to 2.4.44
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2016-09-13 23:19:06 -04:00
W. Michael Petullo
a9222671eb luasec: update to 0.6
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2016-09-13 23:18:23 -04:00
Denis Osvald
d8d457e52c libuv: bump version to 1.9.1
Signed-off-by: Denis Osvald <denis.osvald@sartura.hr>
2016-09-09 13:12:51 +02:00
Nikos Mavrogiannopoulos
2bdeefb514 gnutls: updated to 3.4.15
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2016-09-08 18:28:14 +02:00
Ted Hess
c5dc486560 libvorbisidec: Use HTTPS for Tremor repo
Signed-off-by: Ted Hess <thess@kitschensync.net>
2016-09-08 08:38:01 -04:00
Karl Palsson
0e43c9c994 mosquitto: fix compatibily with libwebsockets
Only applies to the 15.05 branch!
Apply a patch to correct usage with the (rather old) version of
libwebsockets in CC.  Has been submitted upstream.

Fixes github issue #3127

Signed-off-by: Karl Palsson <karlp@etactica.com>
2016-09-05 11:38:28 +00:00
Dirk Brenken
124ac892c6 adblock: update 1.4.7
Apply adblock update 1.4.5-1.4.7

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Original commit messages:

adblock: update 1.4.5
* change the default hphosts list source to ad and tracking servers
only, the overall list includes to many false positives
* new optional config parm 'adb_hotplugif' to restrict hotplug support
to a certain wan interface or to disable it at all
* documentation update
* cosmetics

adblock: update 1.4.6
* added a 'window.close()' to adblock landing page to automatically
close any pop-ups that might get loaded with a blocked ad
* simplified dnsmasq check in ap mode

adblock: update 1.4.7
* add a query function to search the active blocklists for a specific
domain (/etc/init.d/adblock query <DOMAIN>)
* fix bug in ap mode/uhttpd port detection
* check general firewall and dnsmasq package dependencies and remove
redundant checks in ap mode
2016-08-28 17:34:30 +03:00
Karl Palsson
190d5698c6 mosquitto: Bump to 1.4.10
Full changelog: http://mosquitto.org/2016/08/version-1-4-10-released/

Relevant changes:
libwebsockets 2.0 compatibility
openssl 1.1.0 compatibility

Signed-off-by: Karl Palsson <karlp@etactica.com>
2016-08-25 16:13:08 +00:00
Hannu Nyman
bf6eca1a5a Merge pull request #3088 from mrpace2/for-15.05
luai2c: moved upstream project to github
2016-08-23 15:00:42 +03:00
Frank Edelhäuser
f5fe26ec21 moved upstream project to github
Signed-off-by: Frank Edelhaeuser <mrpace2@gmail.com>
2016-08-23 13:37:25 +02:00
Dirk Brenken
7ea2bf5899 adblock: update 1.4.4
Update for-15.05 adblock from 1.2.1 to 1.4.4

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Original commit messages of 1.2.5-1.4.4 commits:

adblock: update 1.2.5
* restructured sources
* fix logical glitches in config handling
* many corner case fixes & cosmetics
* show runtime errors in LuCI (in lastrun section)

adbock: update 1.2.6
* small addition in case of a failed list download

adblock: update 1.2.7
* provide adblock statistics as a separate function
  (/etc/init.d/adblock stats)

adblock: update 1.2.8
* fw rule changes:
	force_dns now supports multiple lan devices
	disable needless force_dns- & forward/output-rules in 'ap mode'
	check return codes during adblock chain creation
* simplified the test for a running firewall
* documentation update

adblock: release 1.3.0
* revised hotplug script
* remove wget package dependency
* support uclient-fetch or wget with ssl support
* documentation update

adblock: update 1.3.1
* fix uclient-fetch detection
* cosmetics

adblock: update 1.3.2
* only a few more fixes

adblock: update 1.3.3
* enable automatic restore on empty source downloads

adblock: release 1.4.0
* rework/speed up overall sort
* simplified dns error handling

adblock: update 1.4.1
* fix two possible overflows in adblock statistics

adblock: update 1.4.2
* ad broad blocklist source 'hphosts' https://hosts-file.net

adblock: update 1.4.3
* fix race condition in restricted mode
* cosmetics

adblock: update 1.4.4
* filter non-printable characters/binary data in input stream
* fix IPv4 adblock statistics in CC
2016-08-14 19:23:04 +03:00
champtar
01c323c293 Merge pull request #3051 from bernhardschmidt/fix-ldns
[for-15.05] ldns: Avoid perl bug for manpages.
2016-08-13 00:17:59 +02:00
Konstantin Shalygin
47d41c531c ldns: Avoid perl bug for manpages.
Fix #2663

Signed-off-by: Konstantin Shalygin <k0ste@cn.ru>
[refresh patch]
Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>

(cherry picked from commit a4a9038f58)
2016-08-12 23:50:45 +02:00
Nikos Mavrogiannopoulos
da01e7e635 ocserv: updated to 0.11.4
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2016-08-06 13:17:19 +02:00
Yousong Zhou
992130a11f Merge pull request #2951 from MikePetullo/for-15.05
dmapd: update to 0.0.73
2016-07-10 09:14:07 +08:00
W. Michael Petullo
ff5a1e4a83 dmapd: update to 0.0.73
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2016-07-09 16:11:53 -04:00
Nikos Mavrogiannopoulos
f9e2ef0543 gnutls: updated to 3.4.14
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2016-07-06 10:46:04 +02:00
champtar
a315fd65a8 Merge pull request #2914 from br101/for-15.05
horst: Use version 5.0
2016-07-03 23:45:21 +02:00
W. Michael Petullo
df9eb01b4d nfs-kernel-server: fix segfault on x86_64/uClibc
Signed-off-by: W. Michael Petullo <mike@flyn.org>
[refresh patch]
Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
2016-07-02 23:25:00 +00:00
Bruno Randolf
f59dbcfd7a horst: Use version 5.0
Signed-off-by: Bruno Randolf <br1@einfach.org>
2016-07-01 10:40:58 +01:00
heil
d33b2c7ef9 haproxy: bump to version 1.5.18 and pending patches
Signed-off-by: heil <heil@terminal-consulting.de>
2016-06-21 01:09:09 +02:00
heil
bb1a9fb1fc pcre: bump to version 8.39
Signed-off-by: heil <heil@terminal-consulting.de>
2016-06-21 00:57:25 +02:00
Nikos Mavrogiannopoulos
73892f2f18 openconnect: updated license
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2016-06-16 22:36:03 +02:00
Nikos Mavrogiannopoulos
3b3df642e4 ocserv: updated license
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2016-06-16 22:35:19 +02:00
Nikos Mavrogiannopoulos
087fa999f1 libtasn1: corrected library license
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2016-06-16 22:34:54 +02:00
Nikos Mavrogiannopoulos
d5d893c31f ocserv: updated to 0.11.3
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2016-06-16 22:26:13 +02:00
Dirk Brenken
d89f201d66 adblock: update 1.2.1
* small optimizations & cosmetics

adblock: release 1.2.0

* rework download/backup/restore handling
* rework firewall handling
* refine whitelist parsing
* changed default null-ip to 198.18.0.1 to prevent conflicts with bcp38
* spread traffic from ad servers (port 80/443) on two uhttpd instances,
this fixes timeouts on sites with many ssl ad server connections, i.e.
youtube.com
* provide statistics & last runtime for LuCI interface
* documentation update

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 8ab3d8bdc2)
(cherry picked from commit 672dd10b10)
2016-06-16 11:18:10 +03:00
champtar
73776792f7 Merge pull request #2782 from feckert/licenses-for-15.05
libtasn1: add license tag
2016-06-13 23:31:17 +02:00
Nikos Mavrogiannopoulos
3fe7b7b6e4 gnutls: updated to 3.4.13
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2016-06-12 15:36:43 +02:00
Karl Palsson
f43f01ea15 net/mosquitto: update maintainer email address
Signed-off-by: Karl Palsson <karlp@remake.is>
Signed-off-by: Karl Palsson <karlp@etactica.com>
2016-06-06 10:52:41 +00:00
Karl Palsson
bf92a7b74d net/mosquitto: bump to v1.4.9
Bugfix release.  Full changelog available at
http://mosquitto.org/2016/06/version-1-4-9-released/

Signed-off-by: Karl Palsson <karlp@etactica.com>
2016-06-06 10:51:10 +00:00
Dirk Brenken
2f637babe8 adblock: update 1.1.17
* change winspy url again
* various cosmetics left out in former release
Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit d0eceb6b25)

adblock: update 1.1.16, release 2
* workaround for LuCI search path issue
Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 26fa1c5df0)

adblock: update 1.1.16
* new config option 'adb_restricted' to disable updates of the adblock
config during runtime (no flash writes, disabled by default)
* new update function, to apply latest configuration changes if needed
(/etc/init.d/adblock cfgup)
* fix dns redirect rule
* various optimizations
Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 41b05a5532)
2016-06-04 10:38:53 +03:00
Dirk Brenken
6b5a320bed adblock: update 1.1.15
* toggle to quickly switch adblocking 'on' or 'off' (/etc/init.d/adblock
toggle)
* new config option 'fetchttl' to set download timeouts (default: 5
seconds)
* better config check, distinct between major/minor changes
* documentation update

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 4f3f239ff2)
2016-06-03 10:14:48 +03:00
Florian Eckert
7e8a6ad18c libtasn1: add license tag
show the license for this package in opkg

Signed-off-by: Florian Eckert <Eckert.Florian@googlemail.com>
2016-05-31 14:49:11 +02:00
Dirk Brenken
72d2cfe064 adblock: update 1.1.12
* change wget binary naming
* change winspy source url
* documentation update

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit bad84563dc)
2016-05-25 22:50:41 +03:00
Dirk Brenken
ffae0de40c adblock: update 1.1.11
* fix changed winspy source url in default config
* fix adblock counters in config
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 54b0115d25)
2016-05-23 17:40:39 +03:00
Dirk Brenken
dd2c7136d3 adblock: update 1.1.10
* automatic AP mode detection (change nullip address accordingly)
* (de-)compress backups on the fly
* remove hardcoded path for logger
* documentation update
* change maintainer email address
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 57853a6c14)
2016-05-23 17:40:15 +03:00
Nikos Mavrogiannopoulos
f178723927 gnutls: updated to 3.4.12
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2016-05-22 17:49:28 +02:00
Nikos Mavrogiannopoulos
3164b99f2f openconnect: use proto_add_host_dependency
This ensures that a direct route to the connected host is added
by netifd.

Resolves #2548

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2016-05-22 17:45:00 +02:00
Jo-Philipp Wich
d45a8bb443 openconnect: avoid possible implicit dependency on liblz4
If the liblz4 library exists within the build environment, the openconnect
configure will pick it up and start depending on it, leading to the following
build error:

    Package openconnect is missing dependencies for the following libraries:
    liblz4.so.1

Disable LZ4 support in configure in order to avoid this implicit,
nondeterministic dependency.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2016-05-22 17:44:51 +02:00
Hannu Nyman
2c7e41efeb fwknop: bump PKG_RELEASE
Bump PKG_RELEASE after #2670

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2016-05-12 10:46:02 +03:00
Dirk Brenken
da4115d276 adblock: update 1.1.2
* remove hardcoded paths for system tools like iptables, uci & fetch
(wget)
* support openwrt & lede spin-off
* cosmetics & cleanups

Signed-off-by: Dirk Brenken <openwrt@brenken.org>

(cherry picked from commit 7b4ad33255)
2016-05-10 16:40:27 +03:00
Dirk Brenken
0f34254995 adblock: update to 1.1.1
* discard uncommitted uci changes in case of processing errors
* init script (stop action) now removes all 'adb_src_count' &
'adb_src_timestamp' entries in config
* updated documentation

Signed-off-by: Dirk Brenken <openwrt@brenken.org>

(cherry picked from commit 262f4551e2)
2016-05-10 16:40:16 +03:00
Dirk Brenken
bb5f4f6d29 adblock: release 1.1.0
* support more router modes, as long as the firewall and the DNS server
are enabled
* new source sites can be added & changed via awk ruleset in uci config
* source domain count, last update time & overall count will be stored
in uci config
* added 3 new source sites:
   ransomware tracker
   rolist/easylist
   winspy
* switch to minimal inline base64 encoded 1×1 GIF for pixel server
(separate png image no longer needed)
* simplified uci parser
* source download & domain sort optimization
* add whitelist parser with wildcard support
* reduced code size & various cleanups
* updated documentation

Signed-off-by: Dirk Brenken <openwrt@brenken.org>
(cherry picked from commit b9aeb82c95)
2016-05-10 16:40:08 +03:00
Hannu Nyman
9aa63712b3 Merge pull request #2670 from oneru/for-15.05
Fwknop: Fix setting getting overwritten
2016-05-08 21:41:04 +03:00
Jonathan Bennett
a105a0ce53 Fwknop: Fix setting getting overwritten
A typo in the init file was causing a certain setting to be overwritten on every daemon start.
Signed-off-by: Jonathan Bennett <JBennett@incomsystems.biz>
2016-05-08 13:35:46 -05:00
champtar
21fe2da3a6 Merge pull request #2509 from wimanwifi/for-15.05-coova-fix-backport
coova-chilli: fix stat failed error when compile without kmod
2016-05-03 21:11:23 +02:00
Nikos Mavrogiannopoulos
632c7899f7 gnutls: updated to 3.4.11
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2016-04-25 23:15:21 +02:00
Nikos Mavrogiannopoulos
869a5943c0 libtasn1: updated to version 4.8
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2016-04-25 23:15:21 +02:00
champtar
c3ed91a734 Merge pull request #2617 from SvenRoederer/fix/tmux_for-15.05
fix download-url for tmux
2016-04-21 16:52:17 +02:00
Sven Roederer
bc9a027a9e tmux: fix download-url
tmux is not avail on Sourceforge anymore, so change to Github as in trunk

Signed-off-by: Sven Roederer <devel-sven@geroedel.de>
2016-04-21 11:27:03 +02:00
champtar
beb295fad0 Merge pull request #2380 from chris5560/for-15.05
[for-15.05] privoxy: bump to 3.0.24 incl. fix for CVE-2016-1982, CVE-2016-1983
2016-04-10 15:06:33 +02:00
Dirk Brenken
4044c55847 adblock: update 1.0.3
* remove syntax glitch & cosmetics
* probably the last 1.0.x release

Signed-off-by: Dirk Brenken <openwrt@brenken.org>
(cherry picked from commit 40a9c0a92d)
2016-04-07 23:23:29 +03:00
Dirk Brenken
289549a6e1 adblock: update 1.0.2
* fix corner case during shallalist backup/restore

Signed-off-by: Dirk Brenken <openwrt@brenken.org>
(cherry picked from commit e32bbffc7b)
2016-04-04 00:45:59 +03:00
Dirk Brenken
3587540ea5 adblock: update 1.0.1
* optimize list sort
* simplified block list removal

Signed-off-by: Dirk Brenken <openwrt@brenken.org>
(cherry picked from commit a066df55a5)
2016-04-04 00:44:01 +03:00
heil
19c5dcf528 haproxy: bump to version 1.5.16
[RELEASE] Released version 1.5.16

  Released version 1.5.16 with the following main changes :
    - BUG/BUILD: replace haproxy-systemd-wrapper with $(EXTRA) in install-bin.
    - BUG/MINOR: acl: don't use record layer in req_ssl_ver
    - BUG: http: do not abort keep-alive connections on server timeout
    - BUG/MEDIUM: http: switch the request channel to no-delay once done.
    - MINOR: config: extend the default max hostname length to 64 and beyond
    - BUG/MEDIUM: http: don't enable auto-close on the response side
    - BUG/MEDIUM: stream: fix half-closed timeout handling
    - BUG/MEDIUM: cli: changing compression rate-limiting must require admin level
    - BUILD: freebsd: double declaration
    - BUG/MEDIUM: sample: urlp can't match an empty value
    - BUG/MEDIUM: peers: table entries learned from a remote are pushed to others after a random delay.
    - BUG/MEDIUM: peers: old stick table updates could be repushed.
    - CLEANUP: haproxy: using _GNU_SOURCE instead of __USE_GNU macro.
    - BUG/MINOR: chunk: make chunk_dup() always check and set dst->size
    - MINOR: chunks: ensure that chunk_strcpy() adds a trailing zero
    - MINOR: chunks: add chunk_strcat() and chunk_newstr()
    - MINOR: chunk: make chunk_initstr() take a const string
    - BUG/MEDIUM: config: Adding validation to stick-table expire value.
    - BUG/MEDIUM: sample: http_date() doesn't provide the right day of the week
    - BUG/MEDIUM: channel: fix miscalculation of available buffer space.
    - BUG/MINOR: stream: don't force retries if the server is DOWN
    - MINOR: unix: don't mention free ports on EAGAIN
    - BUG/CLEANUP: CLI: report the proper field states in "show sess"
    - MINOR: stats: send content-length with the redirect to allow keep-alive
    - BUG: stream_interface: Reuse connection even if the output channel is empty
    - DOC: remove old tunnel mode assumptions
    - DOC: add server name at rate-limit sessions example
    - BUG/MEDIUM: ssl: fix off-by-one in ALPN list allocation
    - BUG/MEDIUM: ssl: fix off-by-one in NPN list allocation
    - BUG/MEDIUM: stats: stats bind-process doesn't propagate the process mask correctly
    - BUG/MINOR: http: Be sure to process all the data received from a server
    - BUG/MEDIUM: chunks: always reject negative-length chunks
    - BUG/MINOR: systemd: ensure we don't miss signals
    - BUG/MINOR: systemd: report the correct signal in debug message output
    - BUG/MINOR: systemd: propagate the correct signal to haproxy
    - MINOR: systemd: ensure a reload doesn't mask a stop
    - CLEANUP: stats: Avoid computation with uninitialized bits.
    - CLEANUP: pattern: Ignore unknown samples in pat_match_ip().
    - CLEANUP: map: Avoid memory leak in out-of-memory condition.
    - BUG/MINOR: tcpcheck: conf parsing error when no port configured on server and last rule is a CONNECT with no port
    - BUG/MINOR: tcpcheck: fix incorrect list usage resulting in failure to load certain configs
    - MINOR: cfgparse: warn when uid parameter is not a number
    - MINOR: cfgparse: warn when gid parameter is not a number
    - BUG/MINOR: standard: Avoid free of non-allocated pointer
    - BUG/MINOR: pattern: Avoid memory leak on out-of-memory condition
    - CLEANUP: http: fix a build warning introduced by a recent fix
    - BUG/MINOR: log: GMT offset not updated when entering/leaving DST

Signed-off-by: heil <heil@terminal-consulting.de>
2016-03-29 13:10:34 +02:00
heil
cc469ae468 pcre: Integrate pending patches for next upstream version 8.39
- Fix auto-callout
    (http://vcs.pcre.org/viewvc?view=rev&revision=1611)
 -  Fix negated POSIX class within negated overall class UCP
    (git-svn-id: svn://vcs.exim.org/pcre/code/trunk@1612 2f5784b3-3f2a-0410-8824-cb99058d5e15)
 - Fix bug for isolated \E between an item and its qualifier when auto callout is set.
    (git-svn-id: svn://vcs.exim.org/pcre/code/trunk@1613 2f5784b3-3f2a-0410-8824-cb99058d5e15)
 - Give error for regexec with pmatch=NULL and REG_STARTEND set
    (git-svn-id: svn://vcs.exim.org/pcre/code/trunk@1614 2f5784b3-3f2a-0410-8824-cb99058d5e15)
 - Fix \Q\E before qualifier bug when auto callouts are
   (git-svn-id: svn://vcs.exim.org/pcre/code/trunk@1616 2f5784b3-3f2a-0410-8824-cb99058d5e15)
 - Fix /x bug when pattern starts with white space and (?-x)
   (git-svn-id: svn://vcs.exim.org/pcre/code/trunk@1617 2f5784b3-3f2a-0410-8824-cb99058d5e15)
 - Fix copy named substring bug.
   (git-svn-id: svn://vcs.exim.org/pcre/code/trunk@1618 2f5784b3-3f2a-0410-8824-cb99058d5e15)
 - Fix (by hacking) another length computation issue.
   (git-svn-id: svn://vcs.exim.org/pcre/code/trunk@1619 2f5784b3-3f2a-0410-8824-cb99058d5e15

 - Fix get_substring_list() bug when \K is used in an assertion.
   (git-svn-id: svn://vcs.exim.org/pcre/code/trunk@1620 2f5784b3-3f2a-0410-8824-cb99058d5e15

 - Fix pcretest bad behaviour for callout in lookbehind.
   (git-svn-id: svn://vcs.exim.org/pcre/code/trunk@1625 2f5784b3-3f2a-0410-8824-cb99058d5e15

 - Fix workspace overflow for (*ACCEPT) with deeply nested
   (git-svn-id: svn://vcs.exim.org/pcre/code/trunk@1631 2f5784b3-3f2a-0410-8824-cb99058d5e15
   fixes CVE-2016-3191

 - Fix Yet another duplicate name bugfix by overestimating the memory needed (i.e. another hack - PCRE2 has this "properly" fixed).
   (git-svn-id: svn://vcs.exim.org/pcre/code/trunk@1636 2f5784b3-3f2a-0410-8824-cb99058d5e15

 - Fix pcretest loop for global matching with an ovector size
   (git-svn-id: svn://vcs.exim.org/pcre/code/trunk@1637 2f5784b3-3f2a-0410-8824-cb99058d5e15

Signed-off-by: heil <heil@terminal-consulting.de>
2016-03-29 13:04:27 +02:00
Etienne CHAMPETIER
e4bfdb144e zabbix: add missing dependency on libiconv ($(ICONV_DEPENDS))
this fixes #2507
thanks @gilfrade and @Noltari

Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
2016-03-23 12:43:52 +00:00
Hannu Nyman
a938fb267a nano: update to 2.5.3
Backport the version upgrade to 2.5.3 from master.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2016-03-16 18:24:55 +02:00
dirk
081f255ac3 adblock: release 1.0.0 (backport from trunk)
Bckport the adblock package from master.

Signed-off-by:  Hannu Nyman <hannu.nyman@iki.fi>
(backport from commit 9f719e4c2c)
2016-03-16 16:11:49 +02:00
Jaehoon You
3c129346a2 coova-chilli: fix stat failed error when compile without kmod
This patch fixes #1261.

Signed-off-by: Jaehoon You <teslamint@gmail.com>
2016-03-15 17:15:03 +01:00
Álvaro Fernández Rojas
8246c8d9b8 minicom: backport fixes for full language support and iconv dependencies
Fixes https://github.com/openwrt/packages/issues/2501

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
2016-03-14 19:09:52 +01:00
Hannu Nyman
aa2a72e459 Merge pull request #2472 from jreinam/patch-1
collectd: perl INSTALL_BASE fix in 15.05
2016-03-09 10:10:54 +02:00
jreinam
fa48db20f7 collectd: perl bindings disable, backported
Fix for compile error in collectd 5.4.2 , for cc15.05, disable perl bindings
backported from trunk 4fc1ad88f7

Signed-off-by: Jordi Reina <rwebking@yahoo.es>
2016-03-09 01:46:43 +01:00
Karl Palsson
637ea2abea mosquitto: Bump to version 1.4.8
Changelog and release notes:
http://mosquitto.org/2016/02/version-1-4-8-released/

Signed-off-by: Karl Palsson <karlp@etactica.com>
2016-03-07 11:42:41 +00:00
Nikos Mavrogiannopoulos
1e0d97f0d8 gnutls: updated to 3.4.10
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2016-03-05 11:58:35 +01:00
heil
b6c9f34a47 [RFC] prosody: update to 0.9.10, switch to procd init script
- backport from master

Signed-off-by: heil <heil@terminal-consulting.de>
2016-02-28 15:34:53 +01:00
Nikos Mavrogiannopoulos
183e5a5e34 ocserv: updated to 0.10.12
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2016-02-19 17:02:35 +01:00
Toke Høiland-Jørgensen
2f36f666e5 sqm-scripts: Bump to v1.0.7.
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2016-02-16 12:33:11 +01:00
Christian Schoenebeck
1adba81824 [for-15.05] privoxy: bump to 3.0.24 incl. fix for CVE-2016-1982, CVE-2016-1983
* upstream to Privoxy 3.0.24
 - incl. fix for CVE-2016-1982 and CVE-2016-1983
* add facility to set compile options
* add file list to be saved on sysupgrade
* fixed PKG_MAINTAINER string
* add port 8118 used by privoxy to /etc/services
* new "boot_delay" option (default 10 seconds) to wait for interfaces to come up before hotplug restarts are enabled

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
2016-02-13 17:39:10 +01:00
Nikos Mavrogiannopoulos
9622fe984b gnutls: updated to 3.4.9
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2016-02-03 09:57:26 +01:00
Ted Hess
185f5ba9e5 lua-cjson: remove zmq dependency (same as trunk)
Signed-off-by: Ted Hess <thess@kitschensync.net>
2016-02-01 10:12:24 -05:00
Álvaro Fernández Rojas
22fd12922e Merge pull request #2319 from mikeage/dump1090
dump1090: fix typo preventing daemon startup
Backport of 51474d7499
2016-01-27 08:24:03 +01:00
Mike Miller
0668c0c861 dump1090: fix typo preventing daemon startup
This fix is already in master, but based on the switch to the
mutability fork.

Signed-off-by: Mike Miller <github@mikeage.net>
2016-01-27 08:10:43 +02:00
Peter Wagner
770b0d6113 ntpd: update to 4.2.8p6
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2016-01-25 20:22:58 +01:00
heil
0bc0190b59 haproxy: add pending patches from upstream
- [PATCH 11/13] BUG/MEDIUM: peers: table entries learned from a remote
 - [PATCH 12/13] BUG/MEDIUM: peers: old stick table updates could be
 - [PATCH 13/13] CLEANUP: haproxy: using _GNU_SOURCE instead of

Signed-off-by: heil <heil@terminal-consulting.de>
2016-01-25 17:01:48 +01:00
heil
b28b3ff56a unixodbc:
- corect fetch url

Signed-off-by: heil <heil@terminal-consulting.de>
2016-01-25 14:08:29 +01:00
heil
560cb220d2 pcre: upgrade to 0.8.38
fixes:
  * CVE 2015-2327 CVE 2015-2328 CVE 2015-8380 CVE 2015-8381 CVE
  * 2015-8382
  * CVE 2015-8383 CVE 2015-8384 CVE 2015-8385 CVE 2015-8386 CVE
  * 2015-8387
  * CVE 2015-8388 CVE 2015-8389 CVE 2015-8390 CVE 2015-8391 CVE
  * 2015-8392
  * CVE 2015-8393 CVE 2015-8394 CVE 2015-8395

Signed-off-by: heil <heil@terminal-consulting.de>
2016-01-25 14:08:12 +01:00
heil
bb23089e84 prosody: upgrade to 0.9.9
fixes:
    * path traversal vulnerability in mod_http_files (CVE-2016-1231)
    * use of weak PRNG in generation of dialback secrets (CVE-2016-1232)

Signed-off-by: heil <heil@terminal-consulting.de>
2016-01-25 13:31:29 +01:00
Michael Heimpold
18d121b854 php5: update to 5.6.17
Fixes CVE-2016-1903.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2016-01-24 21:47:52 +01:00
Noah Meyerhans
41dcf83e53 bind: upgrade to 9.9.8-P3
Fixes:
 * CVE-2015-8704
 * CVE-2015-3193
 * CVE-2015-8000
 * CVE-2015-8461

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2016-01-24 12:43:29 +01:00
Karl Palsson
97a33d77ef mosquitto: properly separate the passwd utility
Building both variants improperly tried to include the passwd utility
for the non-ssl variant, as the variable was set for the ssl variant.

Use properly separated install tasks to install additional files, rather
than hacking around inside the single target.

Signed-off-by: Karl Palsson <karlp@remake.is>
2016-01-19 12:05:48 +00:00
Karl Palsson
6ff7317492 mosquitto: fix old whitespace bug
Introduced back in 2014

Fixes: cd21cbb82e
Signed-off-by: Karl Palsson <karlp@tweak.net.au>
2016-01-19 12:05:48 +00:00
Jo-Philipp Wich
472f8c826e mosquitto: fix whitespace error introduced with 7a6a575887
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
2016-01-18 09:53:55 +01:00
Peter Wagner
400d01d37f tor: update to 0.2.7.6
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2016-01-16 20:42:48 +01:00
Peter Wagner
6052829a43 ntpd: update to 4.2.8p5
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2016-01-16 12:47:09 +01:00
tripolar
dbe561d856 Merge pull request #2270 from xypron/15.05-openssh
openssh: update to 7.1p2
2016-01-16 12:41:05 +01:00
Heinrich Schuchardt
fc7fc89ee7 net/openssh: version 7.1p2
Use version 7.1p2 due to several security bulletins.

Signed-off-by: Heinrich Schuchardt <xypron.glpk@gmx.de>
2016-01-16 11:46:32 +01:00
Karl Palsson
18d05777af mosquitto: Bump to version 1.4.7
Minor changes mostly unrelated to OpenWRT.
Full changelog at http://mosquitto.org/2015/12/version-1-4-7-released/

Signed-off-by: Karl Palsson <karlp@remake.is>
2016-01-15 09:33:59 +00:00
Karl Palsson
5dda75f84c mosquitto: optionally include mosquitto_passwd utility
Many users of the SSL build of mosquitto need the passwd utility for
managing keys.

Fixes github issue #1909

Signed-off-by: Karl Palsson <karlp@remake.is>
2016-01-15 09:33:59 +00:00
Nikolay Martynov
d9c2951b19 bridge-utils: copy from oldpackages
* update Makefile accoring to CONTRIBUTING.md, set maintainer
* fix file offset handling
* use https://git.kernel.org/pub/scm/linux/kernel/git/shemminger/bridge-utils.git for source code

Signed-off-by: Nikolay Martynov <mar.kolya@gmail.com>
2016-01-15 08:45:42 +01:00
Luiz Angelo Daros de Luca
d5999694c1 sane-backends: minor Makefile text typo
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2016-01-14 16:43:01 +01:00
Luiz Angelo Daros de Luca
6128fa0f3d sane-backends: select all backends when CONFIG_ALL
sane-xxx backend packages are hidden packages with custom
config and CONFIG_ALL does not select them alone. Now
sane-backends depends on +ALL:sane-backends-all.

No existing ipk is affected as the changed package/sane-backends
does not exist as an ipk.

030-musl.patch was updated to be submitted upstream. However,
the added preprocessor #if are always true for OpenWRT and will
not change the resulting code.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2016-01-14 16:43:01 +01:00
Luiz Angelo Daros de Luca
752590d266 sane-backends: import from oldpackages and update
Changes since oldpackages:
- updated to 1.0.25
  * most of openwrt patches are upstreamed now
- cups dependency was completely removed
- small musl patch
- small uclibc patch
- removed link to extra libraries in libsane (used only
  for preload backends)
- sane-libs and sane-backends merged and exploded into
  individual packages for each backend:
  * libsane for sane library (which backends should dep on)
  * sane-daemon for saned daemon
  * sane-xxx for sane backend for xxx
  ** each backend has its own custom dep libraries
  * sane-backends-all (with no files) that deps on all backends
  * sane-qcam is only available for x86/x86_64
  ** other archs does not implement inb/outb (at least in musl)

Now it is possible to use SANE with much less FS space (KB
instead of MB).

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2016-01-14 16:43:00 +01:00
Mislav Novakovic
04d79438d2 squid: update to 3.5.12
Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>
2016-01-13 00:59:37 +01:00
Hannu Nyman
6650c96833 Merge pull request #2262 from clehner/for-15.05
ncdu: update to 1.11
2016-01-12 20:12:02 +02:00
Charles Lehner
624f2a8967 ncdu: update to 1.11
- Add patch to get WEXITSTATUS and WIFEXITED defined
    The issue is fixed in upstream's development repo, so the patch won't be
    needed with ncdu's next release.
- Depend on more commonly used libncurses instead of libncursesw
- Enable parallel build
- Update copyright

Signed-off-by: Charles Lehner <cel@celehner.com>
2016-01-12 12:33:23 -05:00
Luiz Angelo Daros de Luca
375f617245 ruby: bump to 2.2.4
This release includes a security fix for Fiddle extension.

* CVE-2015-7551: Unsafe tainted string usage in Fiddle and DL

There are also some bugfixes.

In package, now LD_FLAGS is copied to DLD_FLAGS (used by ruby for libraries).
The missing values from LD_FLAGS cause build error when gcc does not implicitly
include staging/usr/lib.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2016-01-11 15:31:27 +01:00
Hannu Nyman
f6ee970394 Merge pull request #2258 from lbschenkel/cloudflare-rec_id-for-15.05
ddns-scripts: allow setting CloudFlare 'rec_id' in the config
2016-01-11 12:56:58 +02:00
Nikos Mavrogiannopoulos
25de619b04 ocserv: updated to 0.10.11
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2016-01-10 08:35:27 +01:00
Nikos Mavrogiannopoulos
4a3331c47a gnutls: updated to 3.4.8
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2016-01-10 08:35:21 +01:00
Nikos Mavrogiannopoulos
a712cfd4e6 gnutls: updated to 3.4.7
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2016-01-10 08:35:21 +01:00
Hannu Nyman
594e6a4916 Merge pull request #2230 from MikePetullo/for-15.05
For 15.05: Cherry pick a number of updates from maintainer into 15.05
2016-01-09 17:06:44 +02:00
Oliver Middleton
b4a34de7d8 libpng: update to 1.2.56
Fixes CVE-2015-8126 and CVE-2015-8540.

Signed-off-by: Oliver Middleton <olliemail27@gmail.com>
2016-01-09 13:54:46 +01:00
Leonardo Brondani Schenkel
163252fcec ddns-scripts: bump 2.4.3 to release 2 2016-01-08 20:10:58 +01:00
Leonardo Brondani Schenkel
57ba3be8e0 ddns-scripts: allow setting CloudFlare 'rec_id' in the config
This is necessary when there are multiple records for the same domain,
otherwise the script will overwrite the first one returned by the API.
It has the secondary benefit of allowing faster updates by performing
only one API call instead of two.

In case 'rec_id' is not set the script behaves exactly as before.

Signed-off-by: Leonardo Brondani Schenkel <leonardo@schenkel.net>
(grafted from 019ba13d01e93c18d0ed35b0aeb3399f28108e0e)
2016-01-08 19:47:57 +01:00
Nikos Mavrogiannopoulos
57c660e98d ocserv: prevent a crash if the per-user dir does not exist
Relates #2167

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2016-01-05 21:49:13 +01:00
Jo-Philipp Wich
7bc5cdcee3 Merge pull request #2195 from jow-/for-15.05
CC: freeradius2: completely disable runtime OpenSSL version checks
2016-01-04 09:06:40 +01:00
W. Michael Petullo
23fbc85322 krb5: port removal of Prepare target from master
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2016-01-01 17:23:27 -05:00
W. Michael Petullo
aa49d8967b lighttpd: update to 1.4.38
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2016-01-01 16:33:59 -05:00
W. Michael Petullo
19e3ebc68e krb5: update to 1.14
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2016-01-01 16:29:56 -05:00
W. Michael Petullo
b8c9bc0200 openldap: update to 2.4.43
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2016-01-01 16:29:52 -05:00
W. Michael Petullo
304fefb3fa libsoup: update to 2.53.2
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2016-01-01 16:29:48 -05:00
W. Michael Petullo
29fdf3e483 luasec: update to 0.5.1
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2016-01-01 16:29:43 -05:00
Jo-Philipp Wich
08d8c7f60b Merge pull request #2169 from MikePetullo/php5
Cherry pick PHP5 updates into for-15.05.
2015-12-28 16:26:52 +01:00
Jo-Philipp Wich
36ea23dce8 freeradius2: completely disable runtime OpenSSL version checks
Whenever we ship fixed libopenssl binaries in CC, the Freeradius daemon fails
at startup because it detects a mismatch of the build time and runtime OpenSSL
version.

Since our OpenSSL updates for CC are ABI compatible we do not need or even want
this superflous check. Removing it saves us the effort to rebuild Freeradius
after every OpenSSL version bump.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
2015-12-28 16:25:02 +01:00
Michael Heimpold
766cfcc77f php5: update to 5.6.16
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2015-12-23 16:00:14 -05:00
Michael Heimpold
41f541bd26 php5: update to 5.6.15
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2015-12-23 16:00:04 -05:00
Michael Heimpold
0df349f8df php5: update to 5.6.14
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2015-12-23 15:59:54 -05:00
Michael Heimpold
196b622bd6 php5: update to 5.6.13
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2015-12-23 15:59:43 -05:00
Michael Heimpold
1cbcdf7f9e php5: fix the two different maintainer fields into one (fixes #1688)
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2015-12-23 15:59:32 -05:00
Michael Heimpold
9bbdad4ed7 php5: update to 5.6.12
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2015-12-23 15:59:21 -05:00
Michael Heimpold
6cba0bf545 php5: update to 5.6.10
This fixes the following CVEs:
 - in PCRE: CVE-2015-2325, CVE-2015-2326
 - in sqlite3: CVE-2015-3414, CVE-2015-3415, CVE-2015-3416

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2015-12-23 15:59:10 -05:00
Michael Heimpold
559df398ff php5: update to 5.6.9
This fixes CVE-2006-7243, a multipart/form-data remote dos vulnerability,
a heap buffer overflow in unpack and a integer overflow in ftp_genlist,
which also results in a heap overflow.
For more details, see http://php.net/ChangeLog-5.php#5.6.9

Also sync the timezone patch with latest version from Debian and
adopt this patch for the changes in this php release.

Refresh 950-Fix-dl-cross-compiling-issue.patch.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2015-12-23 15:58:46 -05:00
Michael Heimpold
f0a0448857 php5: add php5-mod-opcache (fixes #1010)
This patch adds build infrastructure for PHP's OPcache extension.
Compared with the other extension, this is a Zend module and it
need a little workaround during cross-compiling.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2015-12-23 15:58:27 -05:00
Michael Heimpold
f04165e4e0 php5: pecl: move phpize into prepare stage
This allows pecl modules to rely on PKG_FIXUP:=autoreconf.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2015-12-23 15:57:57 -05:00
Nikos Mavrogiannopoulos
83ad5a9233 vpnc-scripts: bumped version
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-12-20 19:31:50 +02:00
Aleksandar Radovanovic
a057c03002 vpnc-scripts: Fix handling of multiple VPN DNS servers
Fix for #2116 - $INTERNAL_IP{4,6}_DNS variables are not word-split correctly when containing more than one DNS server.

Signed-off-by: Aleksandar Radovanovic <biblbroks@sezampro.rs>
2015-12-20 19:29:59 +02:00
Hannu Nyman
1cf7b5ae05 CONTRIBUTING.md: Add advice about pull requests
Add "best practices" advice about working with pull requests.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit df35777400)
2015-12-15 17:38:35 +02:00
Hannu Nyman
3ee2e24082 wget: bump version to 1.17.1
Backport from trunk the version update to 1.17.1.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2015-12-15 17:24:30 +02:00
Hannu Nyman
d00825894a Merge pull request #2122 from commodo/python-backports-15.05
python: backport some patches from trunk to 15.05
2015-12-14 19:46:25 +02:00
Jan Čermák
c4ca3f0bf2 python: add missing host build dependency on expat/host
Since 94f87dc1, host build of Python depends on expat installed in host
staging directory. However, pyexpat extension fails to build if expat
was not built and installed to staging dir before - adding host build
dependency should fix this.

Signed-off-by: Jan Čermák <jan.cermak@nic.cz>
2015-12-13 20:21:29 +02:00
Attila Lendvai
a28067d30d python: fix cross-compiling C++ modules.
Signed-off-by: Attila Lendvai <attila@lendvai.name>
2015-12-13 20:20:02 +02:00
Steven Barth
7b2c37067b python: add correct host expat
Signed-off-by: Steven Barth <steven@midlink.org>
2015-12-13 20:19:33 +02:00
Jan Čermák
7e6939bdc0 python: fix patch removing multiarch support for host python
Patch removing multiarch paths from build should be applied only when
Python is built for target, but not for host. When the paths are removed
during host build, host python throws some ugly errors when importing
some hashlib modules. Also it reports that modules crypt and nis failed
to build (tested on Ubuntu 14.04 host).

Signed-off-by: Jan Čermák <jan.cermak@nic.cz>
2015-12-13 20:08:45 +02:00
Toke Høiland-Jørgensen
35188c0f9d sqm-scripts: Bump to v1.0.6.
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2015-12-09 15:08:26 +01:00
Nikos Mavrogiannopoulos
ae9a33f00d libradcli: updated to 1.2.5
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-12-07 19:58:21 +01:00
Alexander Ryzhov
87d696053e postgresql: now visible with uclibc
Signed-off-by: Alexander Ryzhov <openwrt@ryzhov-al.ru>
2015-12-07 09:45:55 +01:00
Ted Hess
fa5e832d77 Merge pull request #2072 from thess/for-15.05
dosfstools: [for-15.05] bump to 3.0.28, fix URLs - dev moved to github
2015-12-04 15:11:45 -05:00
Ted Hess
747c5e42f1 dosfstools: bump to 3.0.28, fix URLs - dev moved to github
Signed-off-by: Ted Hess <thess@kitschensync.net>
2015-12-04 15:01:48 -05:00
heil
107b83e1de haproxy: bump to version 1.5.15
- integrate pending patches

Signed-off-by: heil <heil@terminal-consulting.de>
2015-12-02 12:06:32 +01:00
Carlos Miguel Ferreira
74729bc10d p11-kit: Version update
Just a regular version update
- Package gnutls requires the 0.23.1 to compile.

Signed-off-by: Carlos M. Ferreira <carlosmf.pt@gmail.com>
2015-11-29 11:21:57 +01:00
Nikos Mavrogiannopoulos
59f0d5607b ocserv: corrected path for ocserv-fw
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-11-28 23:09:24 +01:00
Nikos Mavrogiannopoulos
fe541acd8a ocserv: correct md5sum, install ocserv-fw, and eliminate ip dependency
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-11-28 23:07:34 +01:00
Nikos Mavrogiannopoulos
c3d29513cb vpnc-script: don't attempt to resolve domains which match the local domain
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-11-28 22:40:19 +01:00
Nikos Mavrogiannopoulos
c1017ac247 vpnc-script: create dnsmasq entries for connections where default domain is set
Relates to #1975

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-11-28 22:40:19 +01:00
Nikos Mavrogiannopoulos
9d22009696 ocserv: updated to 0.10.10
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-11-28 22:30:08 +01:00
Nikos Mavrogiannopoulos
46356c7f39 ocserv: always advertise the local domain to peer
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-11-28 22:30:08 +01:00
Nikos Mavrogiannopoulos
95383f479a ocserv: Added option to pass split-dns configuration to clients
Relates to #1975

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-11-28 22:30:08 +01:00
Nikos Mavrogiannopoulos
94c43deb9f ocserv: when default-domain is set, enable split-dns
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-11-28 22:29:35 +01:00
Nikos Mavrogiannopoulos
6252504514 ocserv: allow enabling proxy ARP
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-11-28 22:29:35 +01:00
Nikos Mavrogiannopoulos
ddb59c4f72 ocserv: if ocserv.conf.local is present append it to ocserv.conf
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-11-28 22:29:34 +01:00
Nikos Mavrogiannopoulos
3e0e8c3863 ocserv: simplify IPv6 network setting
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-11-28 22:29:34 +01:00
Nikos Mavrogiannopoulos
b703519216 ocserv: removed unecessary instructions and script
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-11-28 22:29:34 +01:00
Nikos Mavrogiannopoulos
4185ad9e49 ocserv: updated to 0.10.9
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-11-28 22:29:34 +01:00
Luka Perkov
819a8085cd Merge pull request #2018 from thomasp11/for-15.05
cshark: update to latest git HEAD
2015-11-24 18:50:58 +01:00
Thomas Peterson
b1178b7591 cshark: update to latest git HEAD 2015-11-24 12:41:54 -05:00
Oliver Middleton
c19bf27d8d libpng: update to 1.2.54
Includes fixes for CVE-2015-7981 and CVE-2015-8126.

Signed-off-by: Oliver Middleton <olliemail27@gmail.com>
2015-11-24 16:21:37 +01:00
Steven Barth
a7cd2d9438 Merge pull request #1871 from dangowrt/update-postgresql-for-15.05
update PostgreSQL
2015-11-19 16:23:34 +01:00
Steven Barth
7f24f26e13 Merge pull request #1941 from padre-lacroix/for-15.05
bandwidthd: Addition of 2 variants of the bandwidthd package.
2015-11-19 12:32:21 +01:00
Toke Høiland-Jørgensen
9966c162ce sqm-scripts: Bump to v1.0.5. 2015-11-19 11:46:36 +01:00
Luka Perkov
70471762cc pptpd: backport from trunk
Signed-off-by: Luka Perkov <luka@openwrt.org>
2015-11-18 21:49:25 +01:00
Jean-Michel Lacroix
23fabf774e bandwidthd: Addition of 2 variants of the bandwidthd package.
Addition of the bandwithd package variant from the oldpackage
Addition of the bandwidthd-pgsql package variant that can save also
in a postgres database.
Compile tested on CC and trunk (ar71xx and mvebu in both cases)
run tested on CC (ar71xx) and trunk (r47397 on mvebu)

Signed-off-by: Jean-Michel Lacroix <lacroix@lepine-lacroix.info>
2015-11-10 13:54:42 -05:00
John Crispin
ee0bb7b9df libmraa: board detection was broken after the name changed
Signed-off-by: John Crispin <blogic@openwrt.org>
2015-11-06 22:39:41 +01:00
Álvaro Fernández Rojas
8a70ddefc7 unzip: patch CVE-2015-7696, CVE-2015-7697 and integer underflow
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
2015-11-01 16:21:56 +01:00
John Crispin
f8a70fc188 madplay: some build variant related fixes
the 2 variants could not be built at the same time

Signed-off-by: John Crispin <blogic@openwrt.org>
2015-10-26 17:15:00 +01:00
John Crispin
6f8928afbc node: disable MIPS16
Signed-off-by: John Crispin <blogic@openwrt.org>
2015-10-24 09:57:36 +02:00
Jo-Philipp Wich
375b9aeee4 python: fix two build depend issues
Build depends must refer to the source package name, not the binary one,
therefore we need to use `bzip2` in order to enforce a build of libbz2.so.

Also make the host python build depend on the bzip2 host build in order to
ensure that host python is built with bzip2 support. We don't need a build
dependency for the target python as this already depends on +libbz2 through
python-light. That package dependency in turn implies a build dependency.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
2015-10-24 09:56:53 +02:00
Nikos Mavrogiannopoulos
ffd3b199e1 gnutls: update to 3.4.6
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-10-22 07:34:54 +02:00
John Crispin
f690a75422 node-cylon: dont double build firmata and serialport
Signed-off-by: John Crispin <blogic@openwrt.org>
2015-10-21 10:44:49 +02:00
John Crispin
25a4a2f15d libupm: add fixes for 2 sensors
Signed-off-by: John Crispin <blogic@openwrt.org>
2015-10-20 15:58:30 +02:00
John Crispin
fbef79fd9f swig: make it compile even if pcre libs are not available
Signed-off-by: John Crispin <blogic@openwrt.org>
2015-10-20 13:27:29 +02:00
John Crispin
3740ab89eb node: add a python/host dependency
Signed-off-by: John Crispin <blogic@openwrt.org>
2015-10-20 13:27:29 +02:00
Etienne CHAMPETIER
5d079de65a zabbix: enable IPv6 support
compile tested on trunk, run tested on CC (ar71xx)

size before:
 96757 zabbix-agentd_2.4.6-1_ar71xx.ipk
 29180 zabbix-get_2.4.6-1_ar71xx.ipk
258979 zabbix-proxy_2.4.6-1_ar71xx.ipk
 35121 zabbix-sender_2.4.6-1_ar71xx.ipk
282885 zabbix-server_2.4.6-1_ar71xx.ipk

size after:
 97359 zabbix-agentd_2.4.6-2_ar71xx.ipk
 29841 zabbix-get_2.4.6-2_ar71xx.ipk
259948 zabbix-proxy_2.4.6-2_ar71xx.ipk
 35801 zabbix-sender_2.4.6-2_ar71xx.ipk
284019 zabbix-server_2.4.6-2_ar71xx.ipk

original PR by Thomas Bahn <thomas-bahn@gmx.net>

Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
2015-10-19 22:28:27 +00:00
John Crispin
c86d2d5ecb swig: add PKG_LICENSE_FILE
Signed-off-by: John Crispin <blogic@openwrt.org>
2015-10-19 15:59:58 +02:00
John Crispin
56e6a67621 node-hid: set proper version and revision
* fix revision variables
* fix version variables

Signed-off-by: John Crispin <blogic@openwrt.org>
2015-10-19 15:58:55 +02:00
John Crispin
a0baae412c node-hid: set proper version and revision
* fix revision variables
* fix version variables

Signed-off-by: John Crispin <blogic@openwrt.org>
2015-10-19 15:58:55 +02:00
John Crispin
02d684636a node-cylon: add proper download path and set version properly
* fix version
* fix download path
* fix version variables

Signed-off-by: John Crispin <blogic@openwrt.org>
2015-10-19 15:58:55 +02:00
John Crispin
8133570a9c node-arduino-firmata: set proper download path and set version properly
* fix download path
* fix version variables

Signed-off-by: John Crispin <blogic@openwrt.org>
2015-10-19 15:58:55 +02:00
John Crispin
0c2c46417d madplay: add PKG_RELEASE and keep oss variants name
* update PKG_RELEASE
* dont change the name of the oss variant

Signed-off-by: John Crispin <blogic@openwrt.org>
2015-10-19 15:58:41 +02:00
Dirk Neukirchen
323a2d1da0 postgresql: fix potential snprintf issue
adopt buildroot commit: 3d3f70b567718ae308b5704ddd7d107c4849309e

spotted while reviewing buildroot changes to postgresql

Signed-off-by: Dirk Neukirchen <dirkneukirchen@web.de>
2015-10-19 00:41:59 +02:00
Dirk Neukirchen
c1f12cc650 postgresql: fix uclibc locale.h bug
reported in forum:
https://forum.openwrt.org/viewtopic.php?id=59137

issue was discovered and fixed already in buildroot
git commit id: f5e4ca10220e2325d3a34c0a423388e40b27dbdf

Signed-off-by: Dirk Neukirchen <dirkneukirchen@web.de>
2015-10-19 00:41:59 +02:00
Dirk Neukirchen
0e3e7ca91b postgresql: add missing librt dependency
fixes build error with uclibc

Signed-off-by: Dirk Neukirchen <dirkneukirchen@web.de>
2015-10-19 00:41:59 +02:00
Daniel Golle
40ba683222 postgresql: update source to 9.4.4 and refresh scripts
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2015-10-19 00:41:59 +02:00
Dirk Neukirchen
4ab5dc95a6 postgresql: update to 9.4.1
- supports arm64/aarch64

Signed-off-by: Dirk Neukirchen <dirkneukirchen@web.de>
2015-10-19 00:41:59 +02:00
John Crispin
224ead0d5b madplay: add alsa build variant
Signed-off-by: John Crispin <blogic@openwrt.org>
2015-10-17 12:31:23 +02:00
John Crispin
d88a1494fd yunbridge: add linux side python code
to make the bridge work we need to run an askfirst instance on the ttyS.
additionally add the lua scripts needed to make REST work. this is really ugly
code but it works. i already cleaned up to the original code, but there are still
issues such as a new luci session being created for each request.

Signed-off-by: John Crispin <blogic@openwrt.org>
2015-10-17 12:31:23 +02:00
John Crispin
d313c7b182 libupm: add package
upm is a sensor library that sits ontop of libmraa. it has support for a large
number of sensors and exports bindings for node, python, ...

Signed-off-by: John Crispin <blogic@openwrt.org>
2015-10-17 12:31:23 +02:00
John Crispin
e3d82916ad libmraa: add mraa including mips platform code
mraa is a lowlevel io bus abstraction layer. it allows us to export bindings for
various linux io busses for node, python, ...

Signed-off-by: John Crispin <blogic@openwrt.org>
2015-10-17 12:31:23 +02:00
John Crispin
4fb1eda08e nodejs: add 0.12 version of node
add node-js 0.12 and a few gyp bindings

Signed-off-by: John Crispin <blogic@openwrt.org>
2015-10-16 13:30:56 +02:00
John Crispin
756a24c3d4 swig: add host build
this is a binding generator needed to build node plugins

Signed-off-by: John Crispin <blogic@openwrt.org>
2015-10-16 00:11:57 +02:00
Steven Barth
61d0f260f3 Merge pull request #1791 from MikePetullo/for-15.05-krb5
krb5: update to 1.13.2
2015-10-13 10:06:28 +02:00
John Crispin
9f3881f1f3 python-serial: backport from master branch to for-15.05
Signed-off-by: John Crispin <blogic@openwrt.org>
2015-10-02 13:59:43 +02:00
John Crispin
fc2152034c cgi-io: add a small helper cgi that can be used by RPCD based UIs
Signed-off-by: John Crispin <blogic@openwrt.org>
2015-10-02 13:59:43 +02:00
John Crispin
9d042c3564 spi-tools: add new package
this package adds 2 tools that can be used to control spidev devices from userland

Signed-off-by: John Crispin <blogic@openwrt.org>
2015-10-02 13:59:43 +02:00
Yousong Zhou
7f3ef93466 xl2tpd: bump version
The update is mainly for addressing some memory corruption and segementation
faults issues observed when running xl2tpd in OpenWrt.  The relevant upstream
pull request was at link [1]

 [1] Devel fix valgrind #77, https://github.com/xelerance/xl2tpd/pull/77

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2015-10-02 08:43:14 +08:00
John Crispin
6d892fb2fa python: add dependency to bz2 host build
Signed-off-by: John Crispin <blogic@openwrt.org>
2015-10-01 14:04:15 +02:00
Marko Ratkaj
eb1254a3a0 squild: bump version to 3.5.9
Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
2015-09-27 23:42:22 +02:00
Marko Ratkaj
085fdc9c3c lxc: bump version to 1.1.3
Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
2015-09-27 23:42:11 +02:00
Marko Ratkaj
3831a680ab file: bump version to 5.25
Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
2015-09-27 23:42:05 +02:00
Marko Ratkaj
2a1409b927 e2guardian: bump version to 3.2.0
Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
2015-09-27 23:41:57 +02:00
Yousong Zhou
77e4444a27 xl2tpd: fix by backporting the version from master branch
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2015-09-26 12:03:06 +08:00
Karl Palsson
5fd21e2305 mosquitto: update to 1.4.4
More information: http://mosquitto.org/2015/09/version-1-4-4-released/

Signed-off-by: Karl Palsson <karlp@tweak.net.au>
2015-09-25 15:03:08 +00:00
Nikos Mavrogiannopoulos
b86ffea908 libtasn1: updated to 4.7
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-09-24 10:07:47 +02:00
Nikos Mavrogiannopoulos
4c75da6e28 gnutls: updated to 3.4.5
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-09-24 10:07:47 +02:00
Nikos Mavrogiannopoulos
41a5ec56fe radcli: updated to 1.2.3
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-09-24 10:03:57 +02:00
Steven Barth
088c1a12be Merge pull request #1794 from MikePetullo/for-15.05-lighttpd
lighttpd: update to 1.4.37
2015-09-22 10:42:24 +02:00
W. Michael Petullo
57ec0c99a5 lighttpd: update to 1.4.37
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2015-09-21 15:47:12 +02:00
W. Michael Petullo
b2869e2a22 lighttpd: update to 1.4.37
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2015-09-20 20:14:00 -04:00
W. Michael Petullo
6e1a70ad6c krb5: update to 1.13.2
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2015-09-20 19:41:16 -04:00
Daniel Golle
9cadde2183 tracertools: update source URL
rip gitorious.org

[backport of commit c6b65ce on master]
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2015-09-19 20:40:57 +02:00
Gergely Kiss
ad00330865 sudo: upgrade to version 1.8.14p3
Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
2015-09-17 16:47:09 +02:00
Alexander Tsoy
12b1f4fab8 sudo: preserve sudoers.d during sysupgrade
Signed-off-by: Alexander Tsoy <alexander@tsoy.me>
2015-09-17 16:47:02 +02:00
Steven Barth
9f63667c06 Merge pull request #1733 from hnyman/collectd-entropy
collectd: backport the entropy plugin and changes to example config file
2015-09-15 08:31:35 +02:00
Markus Stenberg
2bcaf5fc70 mdnsresponder: fix fd leak for IPv6 sockets
Signed-off-by: Steven Barth <steven@midlink.org>
2015-09-14 14:06:53 +02:00
Nuno Goncalves
e7c01b17df tcsh: update source mirrors
Signed-off-by: Nuno Goncalves <nunojpg@gmail.com>
2015-09-12 12:11:03 +01:00
Steven Barth
8a0cba2010 Merge pull request #1762 from pdxmeshnet/for-15.05
zmq fixes from master
2015-09-10 17:47:00 +02:00
heil
d06a94bfe6 haproxy: fixes from upstream
- [PATCH 14/16] BUG/MINOR: http: remove stupid HTTP_METH_NONE entry
 - [PATCH 15/16] BUG/MAJOR: http: don't call http_send_name_header()
 - [PATCH 16/16] BUG/MINOR: tools: make str2sa_range() report

Signed-off-by: heil <heil@terminal-consulting.de>
2015-09-09 20:50:36 +02:00
Nicolas Thill
5f24380c03 luarocks: update to 2.2.2
Signed-off-by: Nicolas Thill <nico@openwrt.org>
2015-09-08 17:41:51 -07:00
Daniel Salzman
fd2374e5ff knot: update to 1.6.5
Signed-off-by: Daniel Salzman <daniel.salzman@nic.cz>
2015-09-08 11:33:46 +02:00
Daniel Salzman
dadc4008ed knot: update to 1.6.4
Signed-off-by: Daniel Salzman <daniel.salzman@nic.cz>
2015-09-08 11:33:42 +02:00
Ted Hess
9ea5f365f6 zmq: Make 2 variants, refresh patches, fix C++ build issues
Signed-off-by: Ted Hess <thess@kitschensync.net>
2015-09-07 20:40:55 -07:00
Dirk Chang
4b1cf93c0e libzmq upgrade to 4.1.1
lzmq upgrade to 0.4.3

Signed-off-by: Dirk Chang <dirk@kooiot.com>
2015-09-07 20:39:55 -07:00
Ted Hess
9b2d4f8d83 lzmq: Use smaller .tar.gz source package
Signed-off-by: Ted Hess <thess@kitschensync.net>
2015-09-07 20:39:04 -07:00
Steven Barth
f387d3cc81 strongswan: bump to 5.3.3
Signed-off-by: Steven Barth <steven@midlink.org>
2015-09-07 11:11:22 +02:00
Marcin Jurkowski
997c932e62 strongswan: make kmod-ipsec6 dependency conditional
Makes kmod-ipsec6 requirement dependent on IPv6 support for packages.
This allows to disable unnecessary IPv6 kernel modules, saving
considerable amount of space.

Signed-off-by: Marcin Jurkowski <marcin1j@gmail.com>
2015-09-07 11:11:15 +02:00
Dirk Feytons
29d1085028 strongswan: add a couple more plugins
Signed-off-by: Dirk Feytons <dirk.feytons@gmail.com>
2015-09-07 11:11:07 +02:00
Ulrich Weber
046f800efb strongswan: dont overwrite ipsec.conf and ipsec.user during upgrade
Signed-off-by: Ulrich Weber <uw@ocedo.com>
2015-09-07 11:11:01 +02:00
Yousong Zhou
19cf8c6105 strongswan: split out libtls.so as a separate package.
When only strongswan-minimal is selected, libtls.so will not be built
yet package strongswan will still try to copy the file causing build
failure.

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2015-09-07 11:10:53 +02:00
Adam Lebsack
1deb958e37 strongswan: Added strongswan-mod-eap-tls
Signed-off-by: Adam Lebsack <alebsack@gmail.com>
2015-09-07 11:10:48 +02:00
Steven Barth
da180706b6 strongswan: add more exceptions to musl-fixes
Signed-off-by: Steven Barth <steven@midlink.org>
2015-09-07 11:10:40 +02:00
Steven Barth
69ad693a37 strongswan: refresh musl compatibility fixes
Signed-off-by: Steven Barth <steven@midlink.org>
2015-09-07 11:10:34 +02:00
heil
e51b71ad78 haproxy: fixes from upstream
- [PATCH 05/13] BUG/MINOR: http/sample: gmtime/localtime can fail
 - [PATCH 06/13] DOC: typo in 'redirect', 302 code meaning
 - [PATCH 07/13] DOC: mention that %ms is left-padded with zeroes.
 - [PATCH 08/13] CLEANUP: .gitignore: ignore more test files
 - [PATCH 09/13] CLEANUP: .gitignore: finally ignore everything but what
 - [PATCH 10/13] MEDIUM: config: emit a warning on a frontend without
 - [PATCH 11/13] BUG/MEDIUM: counters: ensure that src_{inc,clr}_gpc0
 - [PATCH 12/13] DOC: ssl: missing LF
 - [PATCH 13/13] DOC: fix example of http-request using

Signed-off-by: heil <heil@terminal-consulting.de>
2015-09-07 00:02:48 +02:00
heil
cad6bb8ee0 unixodbc: bump to version 2.3.4
Signed-off-by: heil <heil@terminal-consulting.de>
2015-09-06 23:57:39 +02:00
heil
985d5c3234 unixodbc: update to 2.3.3
Signed-off-by: heil <heil@terminal-consulting.de>
2015-09-06 23:57:32 +02:00
Nikos Mavrogiannopoulos
241a8ad346 ocserv: updated to 0.10.8
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-09-04 21:33:19 +02:00
Nikos Mavrogiannopoulos
7f6a237d7d openconnect: corrected port descriptions in README
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-09-04 21:33:19 +02:00
Nikos Mavrogiannopoulos
c773d4ad91 ocserv: more explicit documentation
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-09-04 21:33:19 +02:00
Nikos Mavrogiannopoulos
52bf9d5efc ocserv: updated to 0.10.6
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-09-04 21:33:19 +02:00
Hannu Nyman
9af392d629 collectd: backport "Clarify config file example/placeholder" from #1736
The config file shipped with collectd dates from 2010 and
leads to error messages if luci-statistics & collectd are installed,
as it references several plugins not usually installed, or such ones
that have been renamed since then.

For most users, this file is just a placeholder during collectd installation,
as /usr/bin/stat-genconfig from /etc/init.d/luci_statistics will overwrite it.

Sanitize and shorten the placeholder config file:
* Reference actively only the default plugins installed by luci statistics.
* Match the placeholder config with the genuine config from luci statistics.

If somebody uses collectd separately from luci statistics, he will need to
edit these settings anyway.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2015-09-04 15:03:58 +03:00
Hannu Nyman
42f2974f3c collectd: backport the enablement of entropy plugin to for-15.05
Enable 'entropy' plugin also for collectd 5.4.2.
Works ok.

( backport of 35552db4ee )

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2015-09-04 15:03:58 +03:00
Daniel Gimpelevich
877e9fb00d vpnc: bump release
Signed-off-by: Daniel Gimpelevich <daniel@gimpelevich.san-francisco.ca.us>
2015-09-03 17:38:22 +02:00
Daniel Gimpelevich
5ff1b7ad51 vpnc: corrected call to proto_add_host_dependency 2015-09-03 17:38:18 +02:00
Jo-Philipp Wich
cb5b508b46 vpnc: fix musl compatibility
- Add missing `sys/ttydefaults.h` include to `config.c`
 - Restrict usage of `error.h` to glibc and uclibc only
 - Avoid including `linux/if_tun.h` on non-glibc/uclibc to prevent
   musl kernel/libc header conflicts

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
2015-09-03 17:38:13 +02:00
Jo-Philipp Wich
37f1c3f66f Merge pull request #1753 from zorun/bmon_15.05_
bmon: Add missing runtime dependency: terminfo
2015-09-03 17:34:10 +02:00
Baptiste Jonglez
1a78a488b7 bmon: Add missing runtime dependency: terminfo
Signed-off-by: Baptiste Jonglez <git@bitsofnetworks.org>
2015-09-03 17:32:13 +02:00
Toke Høiland-Jørgensen
250b11a475 sqm-scripts: Bump to v1.0.3.
Backported changes from master.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2015-09-03 15:31:56 +02:00
Noah Meyerhans
ffda9cc9c7 [bind] Update to 9.9.7-P3 to fix CVE-2015-5722 and CVE-2015-5986
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2015-09-03 14:03:41 +02:00
Noah Meyerhans
4e3085cd05 bind: update to version 9.9.7-p2
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2015-09-03 14:03:31 +02:00
Alexander Ryzhov
f5c70eaa5a xz: add xz-utils meta package
Signed-off-by: Alexander Ryzhov <openwrt@ryzhov-al.ru>
2015-09-02 12:13:25 +02:00
Jan Čermák
b721a1d8cc libevent: update to 1.4.15 (fixes CVE-2014-6272)
This update fixes CVE-2014-6272. Change of source URL was needed,
because the older location does not contain the latest version.

Signed-off-by: Jan Čermák <jan.cermak@nic.cz>
2015-09-01 19:55:47 +02:00
Steven Barth
114b6ce270 Merge pull request #1728 from roger-/micropython-15.05
micropython: update to latest (15.05)
2015-08-29 08:41:54 +02:00
Roger
0b1509c9e3 micropython: update to latest
Signed-off-by: Roger D <rogerdammit@gmail.com>
2015-08-28 10:36:49 -05:00
John Crispin
d32e986ef6 python: remove bz2 build dep
Revert "python: add dependency to bz2 host build"

This reverts commit da6d7b57f5.

Signed-off-by: John Crispin <blogic@openwrt.org>
2015-08-26 12:18:59 +02:00
Nikos Mavrogiannopoulos
e778bd4998 openconnect: disabled the resolving code from ppp in netifd script
That code was causing netifd disabling openconnect with no way
to restart it.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-08-26 23:00:45 +02:00
John Crispin
47a400aaa7 avrdude: enable linux-gpio by default
Signed-off-by: John Crispin <blogic@openwrt.org>
2015-08-26 00:24:33 +02:00
John Crispin
ef9e4d0eb2 bluelog: mark as BROKEN
the CC Buildservers are failing on this package as the OUI download timesout indefinatley.

Signed-off-by: John Crispin <blogic@openwrt.org>
2015-08-25 16:20:41 +02:00
heil
ee8052d459 haproxy: fixes for upstream version 1.5.14
- [PATCH 1/4] BUG/MINOR: log: missing some ARGC_* entries in
 - [PATCH 2/4] DOC: usesrc root privileges requirements
 - [PATCH 3/4] BUILD: ssl: Allow building against libssl without SSLv3.
 - [PATCH 4/4] DOC/MINOR: fix OpenBSD versions where haproxy works

Signed-off-by: heil <heil@terminal-consulting.de>
2015-08-24 10:46:34 +02:00
John Crispin
de1b14830d libuv: fix download path
Signed-off-by: John Crispin <blogic@openwrt.org>
2015-08-22 01:14:04 +02:00
John Crispin
da6d7b57f5 python: add dependency to bz2 host build
Signed-off-by: John Crispin <blogic@openwrt.org>
2015-08-22 01:12:58 +02:00
Etienne CHAMPETIER
441da09158 zabbix: update to 2.4.6 (and refresh patches)
Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
2015-08-23 22:24:30 +00:00
Daniel Golle
a6d950b739 sqlite3: update source to 3.8.11.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
2015-08-23 19:48:15 +00:00
Ted Hess
02c147374b Merge pull request #1678 from luizluca/for-15.05-ruby_update
ruby: bump version to 2.2.3 [backport from trunk]
2015-08-19 14:54:26 -04:00
Luiz Angelo Daros de Luca
df3c5de2f7 ruby: bump version to 2.2.3
This is a bug and security fix release, including:

- CVE-2015-3900 Request hijacking vulnerability in RubyGems 2.4.6 and earlier

http://svn.ruby-lang.org/repos/ruby/tags/v2_2_3/ChangeLog

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2015-08-19 14:18:50 -03:00
Rafał Miłecki
01717c05a0 lighttpd: backport a fix for running out of filedescriptors
It was breaking uploads of files 4 MiB+. This patch fixes:
https://github.com/openwrt/packages/issues/1658

Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
2015-08-19 17:53:50 +02:00
heil
a7d66cec4c apache: bump to version 2.2.31
Signed-off-by: heil <heil@terminal-consulting.de>
2015-08-17 14:37:14 +02:00
Marcel Denia
b51c61cf55 libidn: Update to 1.32
Signed-off-by: Marcel Denia <naoir@gmx.net>
2015-08-13 20:11:57 +02:00
Nikos Mavrogiannopoulos
74a1d01651 gnutls: updated to 3.4.4
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-08-10 19:51:42 +02:00
Toke Høiland-Jørgensen
1ee31bdfd2 netperf: update to v2.7.0 2015-08-03 18:13:58 +02:00
Toke Høiland-Jørgensen
aa75904c0b Adopt the netperf package.
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2015-08-03 18:13:54 +02:00
Steven Barth
e96cf8db91 Merge pull request #1616 from tru7/for-15.05
[for-15.05] knxd: bump to newest version for CC
2015-07-27 23:24:39 +02:00
Jo-Philipp Wich
5cc2d45535 Merge pull request #1618 from MikePetullo/for-15.05
For 15.05: lighttpd: update to 1.4.36
2015-07-27 18:41:01 +02:00
W. Michael Petullo
1e2bf20acf lighttpd: update to 1.4.36
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2015-07-26 12:56:12 -04:00
Alexander Ryzhov
da756e239f lighttpd: add liblua deps for lighttpd-mod-cml and lighttpd-mod-magnet
Signed-off-by: Alexander Ryzhov <openwrt@ryzhov-al.ru>
2015-07-26 12:55:12 -04:00
Othmar Truniger
805c6e6924 knxd: bump to newest version for CC
Signed-off-by: Othmar Truniger <github@truniger.ch>
2015-07-26 18:27:01 +02:00
Jeroen Louwes
75f978879e mwan3: update to version 1.6-2
Fix malformed uci commands. (issue #1502)

Signed-off-by: Jeroen Louwes <jeroen.louwes@gmail.com>
2015-07-23 13:51:04 +02:00
Cezary Jackiewicz
bcedf17632 [packages] vsftpd: CVE-2015-1419
Unspecified vulnerability in vsftp 3.0.2 and earlier allows remote attackers to bypass access restrictions via unknown vectors, related to deny_file parsing.
2015-07-22 09:47:48 +02:00
Steven Barth
f91e8f04a1 Merge pull request #1599 from MikePetullo/for-15.05
For 15.05: openldap: update to 2.4.41
2015-07-21 13:19:32 +02:00
W. Michael Petullo
5006684e43 openldap: remove --without-cyrus-sasl to build SASL support
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2015-07-20 19:01:24 -04:00
W. Michael Petullo
3a02d9e19a openldap: update copyright dates
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2015-07-20 11:00:36 -04:00
W. Michael Petullo
c05dce1890 openldap: update to 2.4.41
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2015-07-20 11:00:20 -04:00
Daniel Golle
64c458ba8c freeradius2: update to 2.2.8
Fixes oCert CVE-2015-4680.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2015-07-20 10:14:31 +02:00
Steven Barth
bc424ae857 Merge pull request #1572 from dvlemplgk/patch-4
open-plc-utils: backport of update on master branch
2015-07-14 22:12:14 +02:00
Günther Kelleter
14bf39979c open-plc-utils: Update to commit 885a1b7e2e663b5ab8797db6d40a0318131fdf18
This particularly fixes unusable amphost utility on big endian targets.

Signed-off-by: Günther Kelleter <guenther.kelleter@devolo.de>
2015-07-14 15:23:57 +02:00
Toke Høiland-Jørgensen
c293247428 sqm-scripts/luci-app-sqm: Merge upstream changes.
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2015-07-12 22:26:42 +02:00
Toke Høiland-Jørgensen
876ee51cc8 sqm-scripts: Default to ECN on for egress.
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2015-07-12 22:25:12 +02:00
Sebastian Moeller
e9a7e58ba3 [SQM] Fix simple.qos to allow using cake as ingress shaper
simple.qos had accidentally set up the egress shaper twice, once
with the true egress parameters and a second time using the ingress
parameters, effectively misconfiguring both directions. This bub
only affected situations where 3-tier ingress classification was
used.

Signed-off-by: Sebastian Moeller <moeller0@gmx.de>
2015-07-12 22:25:12 +02:00
Sebastian Moeller
478903aea1 [SQM] Fix sqm_logger to accept empty strings as input
sqm_logger tried tro wait indefinitely if passed an empty string.
This in turn makes sqm-scripts hang. Quoting the input argument in sqm_logger
seems to fix the problem.

Signed-off-by: Sebastian Moeller <moeller0@gmx.de>
2015-07-12 22:25:12 +02:00
Sebastian Moeller
30e02086c5 [SQM] Fix changes relating to cake lnk layer adjustments
The last batch of changes tried to teach the GUI to pass link layer
options to cake but forgot to actually call the function that parses
the GUI variables and used it as a string insteead. So this fixes that
it also tries to allow the use of the tc_stab link layer adjustment
method with cake so the implementations can be validated against each other
easily. Needs testing...

Signed-off-by: Sebastian Moeller <moeller0@gmx.de>
2015-07-12 22:25:12 +02:00
Sebastian Moeller
05fe796a8b [SQM/luci-app-sqm] Wire up link layer dandling for cake
The cake traffic-shaper qdisc omne stop solution knows how to handle
link layer adjustments for ATM and can account for per packet overhead.
This commit adds cake as link layer adjustment mechanism in the GUI and
passes numerically specified overhead as well as the ATM linklayer
keywords on to cake. This change also passes the "advanced option strings"
from the Queue Discipline tab to cake. But as before no error checking.
This needs testing, as I have no working cake qdisc available so
caveat emptor...

Signed-off-by: Sebastian Moeller <moeller0@gmx.de>
2015-07-12 22:25:12 +02:00
Dave Taht
9a532691dd luci-app-sqm: add cake support 2015-07-12 22:25:12 +02:00
Dave Taht
1f9238ed3f sqm-scripts: Support the cake qdisc.
Signed-off-by: Dave Taht <dave.taht@bufferbloat.net>
2015-07-12 22:25:12 +02:00
Sebastian Moeller
499aef158d [SQM/luci-app-sqm] Fix SQM GUI help messages.
Make clear that configuration options guarded by checkboxes are only
effective as long as those boxes are checked.

The sqm gui has giarded some advanced configuration options behind exposing
checkboxes, meaning these optiopn's values were only used as long
as those boxes were checked. This commit just improves the description of
the checkboxes to included this useage instruction...

Signed-off-by: Sebastian Moeller <moeller0@gmx.de>
2015-07-12 22:25:12 +02:00
Sebastian Moeller
7a23a00c45 [SQM/luci-app-sqm] Enable sqm initiscript if a single sqm instance gets enabled
The SQM gui has confused its users with an enable button, that only served to
selecively activate/de-activate sqm instances instead of controlling sqm's
initscript (which needs to be enabled so the sqm properly starts up after a reboot
and also for hotplug to work properly). luci-app-sqm will now enable sqm's
initscript when a single sqm instance get enabled. It also informs the user about
this fact in the top margin of the sqm page. Note sqm will not disable the
initscript behind the user's back if sqm instances get disabled.
While I would have prefered this notice to be more prominent an attentive user
should notice, and most users should not care anyway. This also increases the
package release number.

Signed-off-by: Sebastian Moeller <moeller0@gmx.de>
2015-07-12 22:25:12 +02:00
Marcel Denia
c94254f697 libidn: Update to 1.31
Signed-off-by: Marcel Denia <naoir@gmx.net>
2015-07-12 21:43:03 +02:00
Nikos Mavrogiannopoulos
d8ceff5cba gnutls: updated to 3.4.3
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-07-12 21:42:49 +02:00
Etienne CHAMPETIER
b0f4c0ed6f screen: update to 4.3.1
quickly run tested on ar71xx

Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
2015-07-11 00:38:24 +02:00
Etienne CHAMPETIER
a1a5a3fe5f monit: update to 5.14
run tested on ar71xx

Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
2015-07-11 00:38:23 +02:00
Etienne CHAMPETIER
3387e2715f zabbix: increase PKG_RELEASE
Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
2015-07-11 00:38:23 +02:00
Etienne CHAMPETIER
551f39d4fd zabbix: switch zabbix_agentd to procd
run tested on ar71xx

Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
2015-07-11 00:34:31 +02:00
Etienne CHAMPETIER
f505a27607 zabbix: add option to run daemon in foreground
this will allow us to switch to procd and use jailing ...
this patch come from https://support.zabbix.com/browse/ZBXNEXT-611
big thanks to Boris Manojlovic

Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
2015-07-10 21:45:53 +02:00
Nikos Mavrogiannopoulos
62037ba35f openconnect: corrected call to proto_add_host_dependency
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-07-07 22:49:05 +02:00
arfett
2150ffa21f mwan3-luci update to version 1.4-3
Fixed two issues in Chaos Calmer and trunk:
-troubleshooting page not displaying
-UCI arguments out of order because of switch to musl c library from uclibc

Signed-off-by: Aedan "arfett" Renner <chipdankly@gmail.com>
2015-07-07 10:58:33 +02:00
Saverio Proto
b75488123b [for-15.05] tinc: version bump 1.0.26
Signed-off-by: Saverio Proto <zioproto@gmail.com>
2015-07-06 20:24:59 +02:00
Jiri Slachta
51f194e91f libssh2: update to version 1.6.0
Signed-off-by: Jiri Slachta <slachta@cesnet.cz>
2015-07-04 23:03:29 +02:00
heil
181b13f834 haproxy: fixes from upstream
- BUILD/MINOR: tools: rename popcount to my_popcountl
 - BUG/MAJOR: buffers: make the buffer_slow_realign() function respect output data

Signed-off-by: heil <heil@terminal-consulting.de>
2015-07-03 18:35:21 +02:00
heil
45ba9f112a haproxy: fixes from upstream
- BUG/MAJOR: buffers: make the buffer_slow_realign() function respect output data

Signed-off-by: heil <heil@terminal-consulting.de>
2015-07-02 21:58:51 +02:00
Steven Barth
fa7ed79149 Merge pull request #1490 from chris5560/for-15.05
[for-15.05] ddns-scripts: fix/update to version 2.4.3-1
2015-06-29 11:28:08 +02:00
Christian Schoenebeck
ce2b260ca5 [for-15.05] ddns-scripts: fix/update to version 2.4.3-1
fixed sed when filtering IP address from nslookup output
because "Server:" block might have multiple address lines.
Thanks to Arjen de Korte

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
2015-06-27 10:37:50 +02:00
Nikos Mavrogiannopoulos
7551321fab vpnc-scripts: bumped version
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-06-27 08:22:20 +02:00
Nikos Mavrogiannopoulos
814f65cfb9 vpnc-script: handle multiple servers in INTERNAL_IP_DNS vars
Resolves #1372

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-06-27 08:20:14 +02:00
heil
d74b836a35 haproxy: bugfix release 1.5.13
Released version 1.5.13 with the following main changes :
  - BUG/MINOR: check: fix tcpcheck error message
  - CLEANUP: deinit: remove codes for cleaning p->block_rules
  - DOC: Update doc about weight, act and bck fields in the statistics
  - MINOR: ssl: add a destructor to free allocated SSL ressources
  - BUG/MEDIUM: ssl: fix tune.ssl.default-dh-param value being overwritten
  - MEDIUM: ssl: replace standards DH groups with custom ones
  - BUG/MINOR: debug: display (null) in place of "meth"
  - BUG/MINOR: cfgparse: fix typo in 'option httplog' error message
  - BUG/MEDIUM: cfgparse: segfault when userlist is misused
  - BUG/MEDIUM: stats: properly initialize the scope before dumping stats
  - BUG/MEDIUM: http: don't forward client shutdown without NOLINGER except for tunnels
  - CLEANUP: checks: fix double usage of cur / current_step in tcp-checks
  - BUG/MEDIUM: checks: do not dereference head of a tcp-check at the end
  - CLEANUP: checks: simplify the loop processing of tcp-checks
  - BUG/MAJOR: checks: always check for end of list before proceeding
  - BUG/MEDIUM: checks: do not dereference a list as a tcpcheck struct
  - BUG/MEDIUM: peers: apply a random reconnection timeout
  - BUG/MINOR: ssl: fix smp_fetch_ssl_fc_session_id
  - MEDIUM: init: don't stop proxies in parent process when exiting
  - MINOR: peers: store the pointer to the signal handler
  - MEDIUM: peers: unregister peers that were never started
  - MEDIUM: config: propagate the table's process list to the peers sections
  - MEDIUM: init: stop any peers section not bound to the correct process
  - MEDIUM: config: validate that peers sections are bound to exactly one process
  - MAJOR: peers: allow peers section to be used with nbproc > 1
  - DOC: relax the peers restriction to single-process
  - CLEANUP: config: fix misleading information in error message.
  - MINOR: config: report the number of processes using a peers section in the error case
  - BUG/MEDIUM: config: properly compute the default number of processes for a proxy

Signed-off-by: heil <heil@terminal-consulting.de>
2015-06-26 18:08:24 +02:00
heil
0716433f2e haproxy: upstream fixes
- [PATCH 15/18] MEDIUM: ssl: replace standards DH groups with custom
 - [PATCH 16/18] BUG/MINOR: debug: display (null) in place of "meth"
 - [PATCH 17/18] CLEANUP: deinit: remove codes for cleaning
 - [PATCH 18/18] BUG/MINOR: ssl: fix smp_fetch_ssl_fc_session_id

Signed-off-by: heil <heil@terminal-consulting.de>
2015-06-22 14:59:02 +02:00
Nikos Mavrogiannopoulos
8cb6f4c09e transmission: bumped version
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-06-21 12:00:17 +02:00
Nikos Mavrogiannopoulos
4dd617c9af transmission: increase the number of retries for respawn
The default 5 per hour is too small for transmission which may
crash quite some times.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-06-21 11:59:31 +02:00
Nikos Mavrogiannopoulos
641ee7ce44 transmission: use procd
That allows to restart transmission when it crashes, to limit
the memory used by it, as well as be jailed in the directories
it is supposed to access.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-06-21 11:59:22 +02:00
Nikos Mavrogiannopoulos
90914f8054 ocserv: depend on radcli
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-06-20 13:57:33 +02:00
Nikos Mavrogiannopoulos
c555cb924f libradcli: added package to replace freeradius-client
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-06-20 13:57:26 +02:00
Steven Barth
afc558eb7d strongswan: fix musl builds, reenable lost modules
Signed-off-by: Steven Barth <steven@midlink.org>
2015-06-19 18:39:18 +02:00
John Crispin
4a44bd069e seafile-*: update to trunk version
Signed-off-by: John Crispin <blogic@openwrt.org>
2015-06-18 20:06:11 +02:00
John Crispin
a93c172c71 zmq: update to trunk version
Signed-off-by: John Crispin <blogic@openwrt.org>
2015-06-18 20:05:31 +02:00
Nikos Mavrogiannopoulos
50b79a9e86 ocserv: don't use isolate workers as seccomp is not enabled
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-06-17 22:55:44 +02:00
Nikos Mavrogiannopoulos
d28ab39ffa ocserv: disabled MIPS16
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-06-17 22:08:11 +02:00
Nikos Mavrogiannopoulos
f4e47a668d openconnect: updated to 7.06 and disabled MIPS16
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-06-17 22:08:11 +02:00
Nikos Mavrogiannopoulos
1dc27c47f4 gnutls: updated to 3.4.2
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-06-17 20:48:34 +02:00
Toke Høiland-Jørgensen
ede101a5c2 [sqm-scripts/luci-app-sqm] Document how to disable shaping on a per direction basis
sqm-scripts for a long time interprets a "Down- or Upload speed" of zero as
an indication that the shaper should be disabled. Note that really shaping
an individual direction down  o zero will make the link effectively dead
for tcp (think reverse ACK traffic). Son instead of allowing the user to
configure something broken, 0 was "over-loaded" to denote no shaping
since several years, but that information has not been documented visibly
to the users. This commit aims at fixing that oversight.

Signed-off-by: Sebastian Moeller <moeller0@gmx.de>
2015-06-17 13:05:04 +02:00
Steven Barth
2bff28cf8f Merge pull request #1377 from thess/for-15.05
[for-15.05] Remove elfutils & bzip2
2015-06-16 08:51:52 +02:00
Ted Hess
2e394971cb bzip2: Moved to base on git.openwrt.org
Signed-off-by: Ted Hess <thess@kitschensync.net>
2015-06-15 12:37:18 -04:00
Ted Hess
4bdb4c7d8b elfutils: Moved to base on git.openwrt.org
Signed-off-by: Ted Hess <thess@kitschensync.net>
2015-06-15 12:37:01 -04:00
Ted Hess
ed8272ad80 argp-standalone: Moved to 15.05 base at git.openwrt.org
Signed-off-by: Ted Hess <thess@kitschensync.net>
2015-06-15 08:22:34 -04:00
Steven Barth
f0e68f2beb Merge pull request #1367 from oneru/for-15.05
[For-15.05] Fwknopd: Set capture interface to wan by default
2015-06-14 23:09:32 +02:00
Steven Barth
5f9e4b7830 Merge pull request #1365 from chris5560/for-15.05
[for-15.05] radicale: update to 0.10-2 (not updated from trunk)
2015-06-14 23:09:00 +02:00
Jonathan Bennett
a819f2c165 Fwknopd: Set capture interface to wan by default
Signed-off-by: Jonathan Bennett <JBennett@incomsystems.biz>
2015-06-14 08:42:31 -05:00
Christian Schoenebeck
0341970545 [for-15.05] radicale: update to 0.10-2 (not updated from trunk)
* fixed hotplug script (not restarting on "ifup")
* fixed init script (not stopping in 1 second)
* fixed PKG_MAINTAINER string
* removing not needed comments in config file

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
2015-06-14 12:51:15 +02:00
heil
30908edc95 haproxy: add patches from upstream
- [PATCH 1/2] BUG/MEDIUM: stats: properly initialize the scope before
 - [PATCH 2/2] BUG/MEDIUM: http: don't forward client shutdown without
 - [PATCH 3/8] BUG/MINOR: check: fix tcpcheck error message
 - [PATCH 4/8] CLEANUP: checks: fix double usage of cur / current_step
 - [PATCH 5/8] BUG/MEDIUM: checks: do not dereference head of a
 - [PATCH 6/8] CLEANUP: checks: simplify the loop processing of
 - [PATCH 7/8] BUG/MAJOR: checks: always check for end of list before
 - [PATCH 8/8] BUG/MEDIUM: checks: do not dereference a list as a
 - [PATCH 09/10] BUG/MEDIUM: peers: apply a random reconnection timeout
 - [PATCH 10/10] DOC: Update doc about weight, act and bck fields in the
 - [PATCH 11/14] MINOR: ssl: add a destructor to free allocated SSL
 - [PATCH 12/14] BUG/MEDIUM: ssl: fix tune.ssl.default-dh-param value
 - [PATCH 13/14] BUG/MINOR: cfgparse: fix typo in 'option httplog' error
 - [PATCH 14/14] BUG/MEDIUM: cfgparse: segfault when userlist is misused

Signed-off-by: heil <heil@terminal-consulting.de>
2015-06-11 19:05:51 +02:00
heil
f109732f56 pcre: fix CVE-2015-3210
- should fix eap buffer overflow in pcre_compile2() / compile_regex()

Signed-off-by: heil <heil@terminal-consulting.de>
2015-06-08 18:19:07 +02:00
Steven Barth
535e9ef92c strongswan: bump to 5.3.2
Signed-off-by: Steven Barth <steven@midlink.org>
2015-06-08 18:10:16 +02:00
Ted Hess
e56c31a78e Merge pull request #1347 from thess/for-15.05
zmq: Make CurveZMQ security (libsodium) optional [for-15.05]
2015-06-08 07:11:11 -04:00
Steven Barth
430408c0b2 strongswan: update to 5.3.1, cleanup broken modules
Signed-off-by: Steven Barth <steven@midlink.org>
2015-06-08 07:49:03 +02:00
Marcel Denia
4c4c2dbdae db47: Disable Replication Manager
Replication Manager accidentally got enabled by 541193d.
Fixes #1331.

Signed-off-by: Marcel Denia <naoir@gmx.net>
2015-06-05 09:48:38 +02:00
Ted Hess
4267ae50f4 zmq: Make CurveZMQ security (libsodium) optional, cleanup descrition and dependencies
Signed-off-by: Ted Hess <thess@kitschensync.net>
2015-06-04 13:19:34 -04:00
Ted Hess
20a7734215 Revert "zmq: Make CurveZMQ security (libsodium) optional, cleanup descrition and dependencies"
This reverts commit 2cd58bca38.
2015-06-04 13:09:04 -04:00
Ted Hess
2cd58bca38 zmq: Make CurveZMQ security (libsodium) optional, cleanup descrition and dependencies
Signed-off-by: Ted Hess <thess@kitschensync.net>
2015-06-04 13:01:19 -04:00
Paul Fertser
6b8276a000 openocd: update to final 0.9.0
Disables building documentation to avoid makeinfo v4,v5
incompatibilities.

Signed-off-by: Paul Fertser <fercerpav@gmail.com>
2015-06-02 10:06:29 +00:00
Steven Barth
bb9e1ed2c0 Merge pull request #1328 from Naoir/db-python-cc
db47: Force pthread mutexes, bump PKG_RELEASE [for-15.05]
2015-05-31 14:48:44 +02:00
Marcel Denia
541193dd39 db47: Force pthread mutexes, bump PKG_RELEASE
Fixes #1312.

Signed-off-by: Marcel Denia <naoir@gmx.net>
2015-05-31 13:48:55 +02:00
Nikos Mavrogiannopoulos
f138a1ca3c gnutls: corrected regression with camellia cipher
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-05-30 22:53:01 +02:00
Nikos Mavrogiannopoulos
4ae1631f2a ocserv: use freeradius-client library if radius support is requested
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-05-30 22:46:46 +02:00
Nikos Mavrogiannopoulos
c7b9381de5 freeradius-client: added library
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-05-30 22:46:46 +02:00
Marko Ratkaj
7b8fd78406 ulogd: add json plugin
Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
2015-05-28 16:09:01 +02:00
Etienne CHAMPETIER
761c15286f sqlite: update to 3.8.10.2
quickly run tested on ar71xx

Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
2015-05-27 22:06:42 +02:00
Etienne CHAMPETIER
7594df416e zabbix: update to 2.4.5
run tested on ar71xx

Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
2015-05-27 22:06:42 +02:00
Etienne CHAMPETIER
ac7044ae08 monit: update to 5.13
run tested on ar71xx

Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
2015-05-27 22:06:42 +02:00
Karl Palsson
a1e9270f77 libev: Import from management, with path fixes
Imports the latest version from the management feed, and fixes the
install paths.  All example code, and desktop linux expects and installs
libev's headers to /usr/include/<ev.h> not under a subdirectory.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>
2015-05-27 13:26:26 +02:00
Steven Barth
e0fd1fada4 Merge pull request #1288 from equinox0815/for-15.05-pps-tools-linux3.18
pps-tools: enable for Linux 3.18 [for-15.05]
2015-05-27 12:13:44 +02:00
Steven Barth
f7fc4e1ac5 Merge pull request #1304 from equinox0815/for-15.05-ntpd-enalbe-pps
ntpd: enable ATOM (PPS) support [for-15.05]
2015-05-27 12:12:30 +02:00
Jonathan Bennett
a696764d9c libqrencode: fix typo in makefile
Fix compile error due to autoconf
Signed-off-by: Jonathan Bennett <jbennett@incomsystems.biz>
2015-05-26 15:24:03 +02:00
Mislav Novakovic
6f36722c73 freeradius2: add mirror for older releases
Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>
2015-05-26 00:40:31 +02:00
Christian Pointner
26b4ffca23 ntpd: enable ATOM (PPS) support
Signed-off-by: Christian Pointner <equinox@spreadspace.org>
2015-05-25 20:11:34 +02:00
Hauke Mehrtens
73284144f3 openvswitch: fix build with kernel >= 3.18.13
This fixes a build problem with kernel >= 3.18.13.
This should close #1283.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2015-05-24 15:36:44 +02:00
Nikos Mavrogiannopoulos
485bb55197 ocserv: corrected checksum
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-05-24 11:16:51 +02:00
Nikos Mavrogiannopoulos
e08003851f ocserv: updated to 0.10.5
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-05-24 11:10:48 +02:00
Steven Barth
f232eea959 Merge pull request #1290 from Naoir/bash-cc
bash: Update to 4.3.39 [for-15.05]
2015-05-24 10:16:05 +02:00
Jonathan Bennett
2172a9875f Fwknopd: Backport patch to enable keygen in fwknopd
Signed-off-by: Jonathan Bennett <jbennett@incomsystems.biz>
2015-05-24 10:14:22 +02:00
Christian Pointner
8571c01945 pps-tools: enable for Linux 3.18
Signed-off-by: Christian Pointner <equinox@spreadspace.org>
2015-05-22 23:46:25 +02:00
Nikos Mavrogiannopoulos
3558865a6e ocserv: silence warnings and set group default value
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-05-22 21:57:12 +02:00
Marcel Denia
ff0037ac69 bash: Update to 4.3.39
Signed-off-by: Marcel Denia <naoir@gmx.net>
2015-05-22 07:38:37 +02:00
Steven Barth
e4fe3cd093 Merge pull request #1276 from oneru/for-15.05
[for-15.05] libqrencode: import from old packages
2015-05-21 14:44:23 +02:00
Steven Barth
e02c7e81d0 Merge pull request #1273 from guillaume-d/guillaume-d/protobuf/fix-2.6.1
protobuf: Update version to 2.6.1
2015-05-21 07:40:20 +02:00
Jonathan Bennett
8c7d4c4713 libqrencode: import from old packages
Update to latest release
add qrencode package which contains the qrencode binary
Remove libpng dependancy
Signed-off-by: Jonathan Bennett <jbennett@incomsystems.biz>
2015-05-20 18:24:41 -05:00
Guillaume
5bf0fd165e protobuf: Add licensing info and update copyright
Signed-off-by: Guillaume Déflache <guillaume.deflache@ibwag.com>
2015-05-20 23:58:56 +02:00
Luka Perkov
914beae80e libdaq: add SF mirror
Signed-off-by: Luka Perkov <luka@openwrt.org>
2015-05-20 19:10:05 +02:00
Luka Perkov
5ed3339b07 snort: add SF mirror
Signed-off-by: Luka Perkov <luka@openwrt.org>
2015-05-20 19:10:01 +02:00
Guillaume Déflache
359721a21c protobuf: Update version to 2.6.1
- Unbroke MIPS support which got entirely lost since the upgrade from 2.4.1:
  now all ISAs should work (MIPS1 would need kernel emulation though, untested)
- Fixed host installation which was broken on all targets
- Updated source origin to github and related variables
- Kept mipseb patch exception and MIPS16:=0 exclusion (needed for BB and CC compilation)

Only tested on a ZyXEL NBG6716 router which is MIPS32 (MIPS74Kc), ar71xx target.

Signed-off-by: Guillaume Déflache <guillaume.deflache@ibwag.com>
2015-05-19 17:26:17 +02:00
Christian Schoenebeck
3843e8459a ddns-scripts: update to version 2.4.2-1
* fix Makefile to force compression of tld_names.dat reported in OpenWrt Ticket 19597
* change default of retry_count to "0" (retry endless) suggested by Henning Schild
* updated tld_names.dat include changes until 07.05.2015

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
2015-05-18 10:10:31 +02:00
Nikos Mavrogiannopoulos
1d285067a6 libseccomp: updated to 2.2.1
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-05-17 20:10:59 +02:00
Jonathan Bennett
dcaa438f41 Fwknopd: Fix a typo in the init file
Signed-off-by: Jonathan Bennett <jbennett@incomsystems.biz>
2015-05-15 09:43:15 +02:00
Jonathan Bennett
7d72d8b170 Fwknop: add flexibility to uci support
Styling cleanups
signed-off-by: Jonathan Bennett <jbennett@incomsystems.biz>
2015-05-15 09:43:15 +02:00
Jonathan Bennett
8c1e0d4bfd Fwknop: Update to newest release
add basic uci support
add optional gpg support

signed-off-by: Jonathan Bennett <jbennett@incomsystems.biz>
2015-05-15 09:43:15 +02:00
Daniel Golle
76baa032e8 Merge pull request #1254 from lgierth/dkjson-git-15.05
dkjson: switch to LuaDist git repo (for-15.05)
2015-05-13 16:52:00 +02:00
Lars Gierth
92c6504a27 dkjson: bump release
Signed-off-by: Lars Gierth <larsg@systemli.org>
2015-05-13 16:46:35 +02:00
Lars Gierth
89f54efb57 dkjson: switch to LuaDist git repo
Signed-off-by: Lars Gierth <larsg@systemli.org>
2015-05-13 16:46:35 +02:00
Steven Barth
28167ad7eb Merge pull request #1251 from thess/mpd-for-15.05
mpd: Update to 0.18.23, fix ALSA support in mpd-mini, refresh patches (for 15.05)
2015-05-13 00:37:13 +02:00
Steven Barth
a01eb81082 Merge pull request #1252 from thess/libmpdclient-for-15.05
libmpdclient: Update to 2.10 (for 15.05)
2015-05-13 00:36:55 +02:00
Ted Hess
f46542cb83 mpd: Update to 0.18.23, fix ALSA support in mpd-mini, refresh patches
Signed-off-by: Ted Hess <thess@kitschensync.net>
2015-05-12 15:42:29 -04:00
Ted Hess
2019612ec5 libmpdclient: Update to 2.10
Signed-off-by: Ted Hess <thess@kitschensync.net>
2015-05-12 15:39:32 -04:00
Markus Stenberg
e53068dda8 mdnsresponder: No longer require IPv4 address to start.
It used to require 1+ IPv4 addresses to start on Linux. Now it starts
up with 0 addresses (of any type), as netlink can provide us more
later. This way, no stupid restart loop with procd if it is racing
with netifd at startup.

Signed-off-by: Steven Barth <steven@midlink.org>
2015-05-08 13:29:32 +02:00
Karl Palsson
eb97e6fc0f net/mosquitto: Upgrade 1.4.1 to 1.4.2
Bugfix release.  Full changelog available at:
http://mosquitto.org/2015/05/version-1-4-2-released/

Drops a patch now included upstream.

Signed-off-by: Karl Palsson <karlp@remake.is>
2015-05-08 10:44:44 +00:00
Marty R
325c643c92 nut: remove patch for old automake version
tools/automake was updated to 1.15 which removed this bug; patch no longer needed.

Signed-off-by: Martin Rowe <martin.p.rowe@gmail.com>
2015-05-07 08:59:44 +02:00
Steven Barth
fa9ffdfb41 Merge branch 'master' into for-15.05 2015-05-04 20:31:17 +02:00
Nikos Mavrogiannopoulos
9d06518ca4 gnutls: updated to 3.4.1
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-05-04 18:42:33 +02:00
5154 changed files with 136214 additions and 426716 deletions

View file

@ -1,93 +0,0 @@
FROM debian:10
# Configuration version history
# v1.0 - Initial version by Etienne Champetier
# v1.0.1 - Run as non-root, add unzip, xz-utils
# v1.0.2 - Add bzr
# v1.0.3 - Verify usign signatures
# v1.0.4 - Add support for Python3
# v1.0.5 - Add 19.07 public keys, verify keys
# v1.0.6 - Add 21.02 public keys, update Debian image to version 10, add rsync
# v1.0.7 - Add 22.03 public keys, 18.06 v2 gpg key, 18.06 usign key
RUN apt update && apt install -y \
build-essential \
bzr \
curl \
jq \
gawk \
gettext \
git \
libncurses5-dev \
libssl-dev \
python \
python3 \
signify-openbsd \
subversion \
rsync \
time \
unzip \
wget \
xz-utils \
zlib1g-dev \
&& rm -rf /var/lib/apt/lists/*
RUN useradd -c "OpenWrt Builder" -m -d /home/build -s /bin/bash build
USER build
ENV HOME /home/build
# OpenWrt Build System (PGP key for unattended snapshot builds)
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/626471F1.asc' | gpg --import \
&& gpg --fingerprint --with-colons '<pgpsign-snapshots@openwrt.org>' | grep '^fpr:::::::::54CC74307A2C6DC9CE618269CD84BCED626471F1:$' \
&& echo '54CC74307A2C6DC9CE618269CD84BCED626471F1:6:' | gpg --import-ownertrust
# OpenWrt Build System (PGP key for 17.01 "Reboot" release builds)
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/D52BBB6B.asc' | gpg --import \
&& gpg --fingerprint --with-colons '<pgpsign-17.01@openwrt.org>' | grep '^fpr:::::::::B09BE781AE8A0CD4702FDCD3833C6010D52BBB6B:$' \
&& echo 'B09BE781AE8A0CD4702FDCD3833C6010D52BBB6B:6:' | gpg --import-ownertrust
# OpenWrt Release Builder (18.06 Signing Key)
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/17E1CE16.asc' | gpg --import \
&& gpg --fingerprint --with-colons '<openwrt-devel@lists.openwrt.org>' | grep '^fpr:::::::::6768C55E79B032D77A28DA5F0F20257417E1CE16:$' \
&& echo '6768C55E79B032D77A28DA5F0F20257417E1CE16:6:' | gpg --import-ownertrust
# OpenWrt Build System (PGP key for 18.06 release builds)
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/15807931.asc' | gpg --import \
&& gpg --fingerprint --with-colons '<pgpsign-18.06@openwrt.org>' | grep '^fpr:::::::::AD0507363D2BCE9C9E36CEC4FBCB78F015807931:$' \
&& echo 'AD0507363D2BCE9C9E36CEC4FBCB78F015807931:6:' | gpg --import-ownertrust
# OpenWrt Build System (PGP key for 19.07 release builds)
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/2074BE7A.asc' | gpg --import \
&& gpg --fingerprint --with-colons '<pgpsign-19.07@openwrt.org>' | grep '^fpr:::::::::D9C6901F45C9B86858687DFF28A39BC32074BE7A:$' \
&& echo 'D9C6901F45C9B86858687DFF28A39BC32074BE7A:6:' | gpg --import-ownertrust
# OpenWrt Build System (PGP key for 21.02 release builds)
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/88CA59E8.asc' | gpg --import \
&& gpg --fingerprint --with-colons '<pgpsign-21.02@openwrt.org>' | grep '^fpr:::::::::667205E379BAF348863A5C6688CA59E88F681580:$' \
&& echo '667205E379BAF348863A5C6688CA59E88F681580:6:' | gpg --import-ownertrust
# OpenWrt Build System (GnuPGP key for 22.03 release builds)
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/CD54E82DADB3684D.asc' | gpg --import \
&& gpg --fingerprint --with-colons '<pgpsign-22.03@openwrt.org>' | grep '^fpr:::::::::BF856781A01293C8409ABE72CD54E82DADB3684D:$' \
&& echo 'BF856781A01293C8409ABE72CD54E82DADB3684D:6:' | gpg --import-ownertrust
# untrusted comment: Public usign key for unattended snapshot builds
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=usign/b5043e70f9a75cde' --create-dirs -o /home/build/usign/b5043e70f9a75cde \
&& echo 'd7ac10f9ed1b38033855f3d27c9327d558444fca804c685b17d9dcfb0648228f */home/build/usign/b5043e70f9a75cde' | sha256sum --check
# untrusted comment: Public usign key for 18.06 release builds
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=usign/1035ac73cc4e59e3' --create-dirs -o /home/build/usign/1035ac73cc4e59e3 \
&& echo '8dc2e7f5c4e634437e6641f4df77a18bf59f0c8e9016c8ba4be5d4a0111e68c2 */home/build/usign/1035ac73cc4e59e3' | sha256sum --check
# untrusted comment: Public usign key for 19.07 release builds
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=usign/f94b9dd6febac963' --create-dirs -o /home/build/usign/f94b9dd6febac963 \
&& echo 'b1d09457cfbc36fccfe18382d65c54a2ade3e7fd3902da490a53aa517b512755 */home/build/usign/f94b9dd6febac963' | sha256sum --check
# untrusted comment: Public usign key for 21.02 release builds
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=usign/2f8b0b98e08306bf' --create-dirs -o /home/build/usign/2f8b0b98e08306bf \
&& echo 'd102bdd75421c62490b97f520f9db06aadb44ad408b244755d26e96ea5cd3b7f */home/build/usign/2f8b0b98e08306bf' | sha256sum --check
# untrusted comment: Public usign key for 22.03 release builds
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=usign/4d017e6f1ed5d616' --create-dirs -o /home/build/usign/4d017e6f1ed5d616 \
&& echo 'f3c5fdf447d7c2743442e68077d60acc7c3e91754849e1f4b6be837b4204b7e2 */home/build/usign/4d017e6f1ed5d616' | sha256sum --check

View file

@ -1,6 +0,0 @@
# Build/update the docker image
docker pull debian:10
docker build --rm -t docker.io/openwrtorg/packages-cci:latest .
docker tag <IMAGE ID> docker.io/openwrtorg/packages-cci:<VERSION-TAG>
docker push docker.io/openwrtorg/packages-cci

View file

@ -1,182 +0,0 @@
version: 2.0
jobs:
build:
docker:
- image: docker.io/openwrtorg/packages-cci:v1.0.7
environment:
- SDK_HOST: "downloads.openwrt.org"
- SDK_PATH: "snapshots/targets/ath79/generic"
- SDK_FILE: "openwrt-sdk-ath79-generic_*.Linux-x86_64.tar.xz"
- BRANCH: "master"
steps:
- checkout:
path: ~/openwrt_packages
- run:
name: Check changes / verify commits
working_directory: ~/openwrt_packages
command: |
cat >> $BASH_ENV <<EOF
echo_red() { printf "\033[1;31m\$*\033[m\n"; }
echo_green() { printf "\033[1;32m\$*\033[m\n"; }
echo_blue() { printf "\033[1;34m\$*\033[m\n"; }
EOF
source $BASH_ENV
RET=0
for commit in $(git rev-list HEAD ^origin/$BRANCH); do
echo_blue "=== Checking commit '$commit'"
if git show --format='%P' -s $commit | grep -qF ' '; then
echo_red "Pull request should not include merge commits"
RET=1
fi
author="$(git show -s --format=%aN $commit)"
if echo $author | grep -q '\S\+\s\+\S\+'; then
echo_green "Author name ($author) seems ok"
else
echo_red "Author name ($author) need to be your real name 'firstname lastname'"
RET=1
fi
subject="$(git show -s --format=%s $commit)"
if echo "$subject" | grep -q -e '^[0-9A-Za-z,+/_-]\+: ' -e '^Revert '; then
echo_green "Commit subject line seems ok ($subject)"
else
echo_red "Commit subject line MUST start with '<package name>: ' ($subject)"
RET=1
fi
body="$(git show -s --format=%b $commit)"
sob="$(git show -s --format='Signed-off-by: %aN <%aE>' $commit)"
if echo "$body" | grep -qF "$sob"; then
echo_green "Signed-off-by match author"
else
echo_red "Signed-off-by is missing or doesn't match author (should be '$sob')"
RET=1
fi
done
exit $RET
- run:
name: Download the SDK
working_directory: ~/sdk
command: |
curl "https://$SDK_HOST/$SDK_PATH/sha256sums" -sS -o sha256sums
curl "https://$SDK_HOST/$SDK_PATH/sha256sums.asc" -fs -o sha256sums.asc || true
curl "https://$SDK_HOST/$SDK_PATH/sha256sums.sig" -fs -o sha256sums.sig || true
if [ ! -f sha256sums.asc ] && [ ! -f sha256sums.sig ]; then
echo_red "Missing sha256sums signature files"
exit 1
fi
[ ! -f sha256sums.asc ] || gpg --with-fingerprint --verify sha256sums.asc sha256sums
if [ -f sha256sums.sig ]; then
VERIFIED=
for KEY in ~/usign/*; do
echo "Trying $KEY..."
if signify-openbsd -V -q -p "$KEY" -x sha256sums.sig -m sha256sums; then
echo "...verified"
VERIFIED=1
break
fi
done
if [ -z "$VERIFIED" ]; then
echo_red "Could not verify usign signature"
exit 1
fi
fi
rsync -av "$SDK_HOST::downloads/$SDK_PATH/$SDK_FILE" .
sha256sum -c --ignore-missing sha256sums
- run:
name: Prepare build_dir
working_directory: ~/build_dir
command: |
tar Jxf ~/sdk/$SDK_FILE --strip=1
touch .config
make prepare-tmpinfo scripts/config/conf
./scripts/config/conf --defconfig=.config Config.in
make prereq
rm .config
cat > feeds.conf <<EOF
src-git base https://github.com/openwrt/openwrt.git;$BRANCH
src-link packages $HOME/openwrt_packages
src-git luci https://github.com/openwrt/luci.git;$BRANCH
EOF
cat feeds.conf
./scripts/feeds update -a > /dev/null
make defconfig > /dev/null
# enable BUILD_LOG
sed -i 's/# CONFIG_BUILD_LOG is not set/CONFIG_BUILD_LOG=y/' .config
- run:
name: Install & download source, check package, compile
working_directory: ~/build_dir
command: |
set +o pipefail
PKGS=$(cd ~/openwrt_packages; git diff --diff-filter=d --name-only "origin/$BRANCH..." | grep 'Makefile$' | grep -Ev '/files/|/src/' | awk -F/ '{ print $(NF-1) }')
if [ -z "$PKGS" ] ; then
echo_blue "WARNING: No new or modified packages found!"
exit 0
fi
echo_blue "=== Found new/modified packages: $PKGS"
for PKG in $PKGS ; do
echo_blue "===+ Install: $PKG"
./scripts/feeds install "$PKG"
echo_blue "===+ Download: $PKG"
make "package/$PKG/download" V=s
echo_blue "===+ Check package: $PKG"
make "package/$PKG/check" V=s 2>&1 | tee logtmp
RET=${PIPESTATUS[0]}
if [ $RET -ne 0 ]; then
echo_red "=> Package check failed: $RET)"
exit $RET
fi
badhash_msg="HASH does not match "
badhash_msg+="|HASH uses deprecated hash,"
badhash_msg+="|HASH is missing,"
if grep -qE "$badhash_msg" logtmp; then
echo_red "=> Package HASH check failed"
exit 1
fi
echo_green "=> Package check OK"
done
make \
-f .config \
-f tmp/.packagedeps \
-f <(echo '$(info $(sort $(package-y) $(package-m)))'; echo -en 'a:\n\t@:') \
| tr ' ' '\n' >enabled-package-subdirs.txt
for PKG in $PKGS ; do
if ! grep -m1 -qE "(^|/)$PKG$" enabled-package-subdirs.txt; then
echo_red "===+ Building: $PKG skipped. It cannot be enabled with $SDK_FILE"
continue
fi
echo_blue "===+ Building: $PKG"
make "package/$PKG/compile" -j3 V=s || {
RET=$?
echo_red "===+ Building: $PKG failed, rebuilding with -j1 for human readable error log"
make "package/$PKG/compile" -j1 V=s; exit $RET
}
done
- store_artifacts:
path: ~/build_dir/logs
- store_artifacts:
path: ~/build_dir/bin
workflows:
version: 2
buildpr:
jobs:
- build:
filters:
branches:
ignore: master

View file

@ -1,16 +0,0 @@
Please make sure that the issue subject starts with `<package-name>: `
Also make sure that the package is maintained in this repository and not in base which should be submitted at https://bugs.openwrt.org or in the LuCI repository which should be submitted at https://github.com/openwrt/luci/issues.
Issues related to releases below 18.06 and forks are not supported or maintained and will be closed.
# Issue template (remove lines from top till here)
Maintainer: @\<github-user> (find it by checking history of the package Makefile)
Environment: (put here arch, model, OpenWrt version)
Description:
```
Format code blocks by wrapping them with pairs of ```
```

View file

@ -1,5 +0,0 @@
Maintainer: me / @\<github-user> (find it by checking history of the package Makefile)
Compile tested: (put here arch, model, OpenWrt version)
Run tested: (put here arch, model, OpenWrt version, tests done)
Description:

View file

@ -1,6 +0,0 @@
ARG ARCH=x86-64
FROM openwrt/rootfs:$ARCH
ADD entrypoint.sh /entrypoint.sh
CMD ["/entrypoint.sh"]

View file

@ -1,91 +0,0 @@
name: Check autorelease deprecation
on:
pull_request_target:
types: [opened, synchronize, converted_to_draft, ready_for_review, edited]
jobs:
build:
name: Check autorelease deprecation
runs-on: ubuntu-latest
strategy:
fail-fast: false
permissions:
pull-requests: write
steps:
- uses: actions/checkout@v3
with:
ref: ${{ github.event.pull_request.head.sha }}
fetch-depth: 0
- name: Determine branch name
run: |
BRANCH="${GITHUB_BASE_REF#refs/heads/}"
echo "Building for $BRANCH"
echo "BRANCH=$BRANCH" >> $GITHUB_ENV
- name: Determine changed packages
run: |
RET=0
# only detect packages with changes
PKG_ROOTS=$(find . -name Makefile | \
grep -v ".*/src/Makefile" | \
sed -e 's@./\(.*\)/Makefile@\1/@')
CHANGES=$(git diff --diff-filter=d --name-only origin/$BRANCH...)
for ROOT in $PKG_ROOTS; do
for CHANGE in $CHANGES; do
if [[ "$CHANGE" == "$ROOT"* ]]; then
if grep -q '$(AUTORELEASE)' "$ROOT/Makefile"; then
CONTAINS_AUTORELEASE+="$ROOT"
fi
break
fi
done
done
if [ -n "$CONTAINS_AUTORELEASE" ]; then
RET=1
cat > "$GITHUB_WORKSPACE/pr_comment.md" << EOF
Please do no longer set *PKG_RELEASE* to *AUTORELEASE* as the
feature is deprecated. Please use an integer instead. Below is a
list of affected packages including correct *PKG_RELEASE*:
EOF
fi
for ROOT in $CONTAINS_AUTORELEASE; do
echo -n " - ${ROOT}Makefile: PKG_RELEASE:=" >> "$GITHUB_WORKSPACE/pr_comment.md"
last_bump="$(git log --pretty=format:'%h %s' "$ROOT" |
grep --max-count=1 -e ': [uU]pdate to ' -e ': [bB]ump to ' |
cut -f 1 -d ' ')"
if [ -n "$last_bump" ]; then
echo -n $(($(git rev-list --count "$last_bump..HEAD" "$ROOT") + 2)) >> "$GITHUB_WORKSPACE/pr_comment.md"
else
echo -n $(($(git rev-list --count HEAD "$ROOT") + 2)) >> "$GITHUB_WORKSPACE/pr_comment.md"
fi
echo >> "$GITHUB_WORKSPACE/pr_comment.md"
done
exit $RET
- name: Find Comment
uses: peter-evans/find-comment@v2
if: ${{ failure() }}
id: fc
with:
issue-number: ${{ github.event.pull_request.number }}
comment-author: 'github-actions[bot]'
- name: Create or update comment
uses: peter-evans/create-or-update-comment@v2
if: ${{ failure() }}
with:
comment-id: ${{ steps.fc.outputs.comment-id }}
issue-number: ${{ github.event.pull_request.number }}
body-file: 'pr_comment.md'
edit-mode: replace

View file

@ -1,26 +0,0 @@
#!/bin/sh
color_out() {
printf "\e[0;$1m$PKG_NAME: %s\e[0;0m\n" "$2"
}
success() {
color_out 32 "$1"
}
info() {
color_out 36 "$1"
}
err() {
color_out 31 "$1"
}
warn() {
color_out 33 "$1"
}
err_die() {
err "$1"
exit 1
}

View file

@ -1,70 +0,0 @@
#!/bin/sh
# not enabling `errtrace` and `pipefail` since those are bash specific
set -o errexit # failing commands causes script to fail
set -o nounset # undefined variables causes script to fail
echo "src/gz packages_ci file:///ci" >> /etc/opkg/distfeeds.conf
FINGERPRINT="$(usign -F -p /ci/packages_ci.pub)"
cp /ci/packages_ci.pub "/etc/opkg/keys/$FINGERPRINT"
mkdir -p /var/lock/
opkg update
export CI_HELPER="/ci/.github/workflows/ci_helpers.sh"
for PKG in /ci/*.ipk; do
tar -xzOf "$PKG" ./control.tar.gz | tar xzf - ./control
# package name including variant
PKG_NAME=$(sed -ne 's#^Package: \(.*\)$#\1#p' ./control)
# package version without release
PKG_VERSION=$(sed -ne 's#^Version: \(.*\)$#\1#p' ./control)
PKG_VERSION="${PKG_VERSION%-[!-]*}"
# package source containing test.sh script
PKG_SOURCE=$(sed -ne 's#^Source: \(.*\)$#\1#p' ./control)
PKG_SOURCE="${PKG_SOURCE#/feed/}"
echo
echo "Testing package $PKG_NAME in version $PKG_VERSION from $PKG_SOURCE"
if ! [ -d "/ci/$PKG_SOURCE" ]; then
echo "$PKG_SOURCE is not a directory"
exit 1
fi
PRE_TEST_SCRIPT="/ci/$PKG_SOURCE/pre-test.sh"
TEST_SCRIPT="/ci/$PKG_SOURCE/test.sh"
if ! [ -f "$TEST_SCRIPT" ]; then
echo "No test.sh script available"
continue
fi
export PKG_NAME PKG_VERSION
if [ -f "$PRE_TEST_SCRIPT" ]; then
echo "Use package specific pre-test.sh"
if sh "$PRE_TEST_SCRIPT" "$PKG_NAME" "$PKG_VERSION"; then
echo "Pre-test successful"
else
echo "Pre-test failed"
exit 1
fi
else
echo "No pre-test.sh script available"
fi
opkg install "$PKG"
echo "Use package specific test.sh"
if sh "$TEST_SCRIPT" "$PKG_NAME" "$PKG_VERSION"; then
echo "Test successful"
else
echo "Test failed"
exit 1
fi
opkg remove "$PKG_NAME" --force-removal-of-dependent-packages --force-remove --autoremove || true
done

View file

@ -1,55 +0,0 @@
name: Test Formalities
on:
pull_request:
jobs:
build:
name: Test Formalities
runs-on: ubuntu-latest
strategy:
fail-fast: false
steps:
- uses: actions/checkout@v3
with:
ref: ${{ github.event.pull_request.head.sha }}
fetch-depth: 0
- name: Determine branch name
run: |
BRANCH="${GITHUB_BASE_REF#refs/heads/}"
echo "Building for $BRANCH"
echo "BRANCH=$BRANCH" >> $GITHUB_ENV
- name: Test formalities
run: |
source .github/workflows/ci_helpers.sh
RET=0
for commit in $(git rev-list HEAD ^origin/$BRANCH); do
info "=== Checking commit '$commit'"
if git show --format='%P' -s $commit | grep -qF ' '; then
err "Pull request should not include merge commits"
RET=1
fi
subject="$(git show -s --format=%s $commit)"
if echo "$subject" | grep -q -e '^[0-9A-Za-z,+/_-]\+: ' -e '^Revert ' -e '^CONTRIBUTING.md' -e '^README.md'; then
success "Commit subject line seems ok ($subject)"
else
err "Commit subject line MUST start with '<package name>: ' ($subject)"
RET=1
fi
body="$(git show -s --format=%b $commit)"
sob="$(git show -s --format='Signed-off-by: %aN <%aE>' $commit)"
if echo "$body" | grep -qF "$sob"; then
success "Signed-off-by match author"
else
err "Signed-off-by is missing or doesn't match author (should be '$sob')"
RET=1
fi
done
exit $RET

View file

@ -1,206 +0,0 @@
name: Test Build
on:
pull_request:
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
jobs:
build:
name: Test ${{ matrix.arch }}
runs-on: ubuntu-latest
strategy:
fail-fast: false
matrix:
include:
- arch: aarch64_generic
target: armsr-armv8
runtime_test: true
- arch: arm_cortex-a15_neon-vfpv4
target: armsr-armv7
runtime_test: true
- arch: arm_cortex-a9_vfpv3-d16
target: mvebu-cortexa9
runtime_test: false
- arch: i386_pentium-mmx
target: x86-geode
runtime_test: true
- arch: mips_24kc
target: ath79-generic
runtime_test: true
- arch: mipsel_24kc
target: mt7621
runtime_test: false
- arch: powerpc_464fp
target: apm821xx-nand
runtime_test: false
- arch: powerpc_8548
target: mpc85xx-p1010
runtime_test: false
- arch: riscv64_riscv64
target: sifiveu-generic
runtime_test: false
- arch: x86_64
target: x86-64
runtime_test: true
steps:
- uses: actions/checkout@v3
with:
fetch-depth: 0
- name: Determine branch name
run: |
BRANCH="${GITHUB_BASE_REF#refs/heads/}"
echo "Building for $BRANCH"
echo "BRANCH=$BRANCH" >> $GITHUB_ENV
- name: Determine changed packages
run: |
# only detect packages with changes
PKG_ROOTS=$(find . -name Makefile | \
grep -v ".*/src/Makefile" | \
sed -e 's@./\(.*\)/Makefile@\1/@')
CHANGES=$(git diff --diff-filter=d --name-only origin/$BRANCH...)
for ROOT in $PKG_ROOTS; do
for CHANGE in $CHANGES; do
if [[ "$CHANGE" == "$ROOT"* ]]; then
PACKAGES+=$(echo "$ROOT" | sed -e 's@.*/\(.*\)/@\1 @')
break
fi
done
done
# fallback to test packages if nothing explicitly changes this is
# should run if other mechanics in packages.git changed
PACKAGES="${PACKAGES:-vim attendedsysupgrade-common bmon}"
echo "Building $PACKAGES"
echo "PACKAGES=$PACKAGES" >> $GITHUB_ENV
- name: Generate build keys
run: |
sudo apt-get update
sudo apt-get install -y signify-openbsd
signify-openbsd -G -n -c 'DO NOT USE - OpenWrt packages feed CI' -p packages_ci.pub -s packages_ci.sec
EOF=$(dd if=/dev/urandom bs=15 count=1 status=none | base64)
echo "KEY_BUILD<<$EOF" >> $GITHUB_ENV
cat packages_ci.sec >> $GITHUB_ENV
echo "$EOF" >> $GITHUB_ENV
- name: Build
uses: openwrt/gh-action-sdk@v7
env:
ARCH: ${{ matrix.arch }}-${{ env.BRANCH }}
FEEDNAME: packages_ci
INDEX: 1
KEY_BUILD: ${{ env.KEY_BUILD }}
V: s
- name: Move created packages to project dir
if: always()
run: cp bin/packages/${{ matrix.arch }}/packages_ci/* . || true
- name: Collect metadata
if: always()
run: |
MERGE_ID=$(git rev-parse --short HEAD)
echo "MERGE_ID=$MERGE_ID" >> $GITHUB_ENV
echo "BASE_ID=$(git rev-parse --short HEAD^1)" >> $GITHUB_ENV
echo "HEAD_ID=$(git rev-parse --short HEAD^2)" >> $GITHUB_ENV
PRNUMBER=${GITHUB_REF_NAME%/merge}
echo "PRNUMBER=$PRNUMBER" >> $GITHUB_ENV
echo "ARCHIVE_NAME=${{matrix.arch}}-PR$PRNUMBER-$MERGE_ID" >> $GITHUB_ENV
- name: Generate metadata
if: always()
run: |
cat << _EOF_ > PKG-INFO
Metadata-Version: 2.1
Name: ${{env.ARCHIVE_NAME}}
Version: $BRANCH
Author: $GITHUB_ACTOR
Home-page: $GITHUB_SERVER_URL/$GITHUB_REPOSITORY/pull/$PRNUMBER
Download-URL: $GITHUB_SERVER_URL/$GITHUB_REPOSITORY/actions/runs/$GITHUB_RUN_ID
Summary: $PACKAGES
Platform: ${{ matrix.arch }}
Packages for OpenWrt $BRANCH running on ${{matrix.arch}}, built from PR $PRNUMBER
at commit $HEAD_ID, against $BRANCH at commit $BASE_ID, with merge SHA $MERGE_ID.
Modified packages:
_EOF_
for p in $PACKAGES
do
echo " "$p >> PKG-INFO
done
echo >> PKG-INFO
echo Full file listing: >> PKG-INFO
ls -al *.ipk >> PKG-INFO || true
cat PKG-INFO
- name: Store packages
if: always()
uses: actions/upload-artifact@v3
with:
name: ${{env.ARCHIVE_NAME}}-packages
path: |
Packages
Packages.*
*.ipk
PKG-INFO
- name: Store logs
if: always()
uses: actions/upload-artifact@v3
with:
name: ${{env.ARCHIVE_NAME}}-logs
path: |
logs/
PKG-INFO
- name: Remove logs
if: always()
run: sudo rm -rf logs/ || true
- name: Check if any packages were built
run: |
if [ -n "$(find . -maxdepth 1 -type f -name '*.ipk' -print -quit)" ]; then
echo "Found *.ipk files"
HAVE_IPKS=true
else
echo "No *.ipk files found"
HAVE_IPKS=false
fi
echo "HAVE_IPKS=$HAVE_IPKS" >> $GITHUB_ENV
- name: Register QEMU
if: ${{ matrix.runtime_test && fromJSON(env.HAVE_IPKS) }}
run: |
sudo apt-get update
sudo apt-get install -y qemu-user-static binfmt-support
sudo update-binfmts --import
- name: Build Docker container
if: ${{ matrix.runtime_test && fromJSON(env.HAVE_IPKS) }}
run: |
docker build -t test-container --build-arg ARCH .github/workflows/
env:
ARCH: ${{ matrix.arch }}-${{ env.BRANCH }}
- name: Test via Docker container
if: ${{ matrix.runtime_test && fromJSON(env.HAVE_IPKS) }}
run: |
docker run --rm -v $GITHUB_WORKSPACE:/ci test-container

View file

@ -1,64 +0,0 @@
-----BEGIN PGP PUBLIC KEY BLOCK-----
Comment: LEDE GnuPG key for unattended build jobs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=W2Tk
-----END PGP PUBLIC KEY BLOCK-----

View file

@ -1,30 +0,0 @@
-----BEGIN PGP PUBLIC KEY BLOCK-----
Comment: LEDE 17.01 "Reboot" public key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=aN5O
-----END PGP PUBLIC KEY BLOCK-----

View file

@ -1,218 +1,114 @@
# Contributing Guidelines
# Contributing Guidelines
(See <http://wiki.openwrt.org/doc/devel/packages> for overall format and construction)
Ref: <https://openwrt.org/docs/guide-developer/packages> for overall format and construction
## Basic guidelines
### Basic guidelines
All packages you commit or submit by pull-request should follow these simple
guidelines:
All packages you commit or submit by pull-request should follow these simple guidelines:
* Package a version which is still maintained by the upstream author.
* Will be updated regularly to maintained and supported versions.
* Have no dependencies outside the OpenWrt core packages or this repository feed.
* Have been tested to compile with the correct includes and dependencies. Please also test with "Compile with full language support" found under "General Build Settings" set if language support is relevant to your package.
* Do NOT use a rolling source file (e.g. foo-latest.tar.gz) or the head of a branch as source for the package since that would create unpredictable builds which change over time.
* Best of all -- it works as expected!
- Package a version which is still maintained by the upstream author and will
be updated regularly with supported versions.
- Have no dependencies outside the OpenWrt core packages or this repository
feed.
- Have been tested to compile with the correct includes and dependencies.
Please also test with "Compile with full language support" found under
"General Build Settings" set if language support is relevant to your package.
- Best of all -- it works as expected!
#### Makefile contents should contain:
## Package Sources (archives and repositories)
* An up-to-date copyright notice. Use OpenWrt if no other present or supply your own.
* A (PKG_)MAINTAINER definition listing either yourself or another person in the field.
(E.g.: PKG_MAINTAINER:= Joe D. Hacker `<jdh@jdhs-email-provider.org`>)
* A PKG_LICENSE tag declaring the main license of the package.
(E.g.: PKG_LICENSE:=GPL-2.0+) Please use SPDX identifiers if possible (see list at the bottom).
* An optional PKG_LICENSE_FILES tag including the filenames of the license-files in the source-package.
(E.g.: PKG_LICENSE_FILES:=COPYING)
* PKG_RELEASE should be initially set to 1 or reset to 1 if the software version is changed. You should increment it if the package itself has changed. For example, modifying a support script, changing configure options like --disable* or --enable* switches, or if you changed something in the package which causes the resulting binaries to be different. Changes like correcting md5sums, changing mirror URLs, adding a maintainer field or updating a comment or copyright year in a Makefile do not require a change to PKG_RELEASE.
- PKG_SOURCE should reference the smallest available archive. In order of
preference: xz (most compressed), bzip2, gz and zip. As a last resort,
downloads from source repositories can be used.
- PKG_SOURCE_URL should link to an official release archive. Use of HTTPS&#x3A;
is preferred. If a source archive is not available, a locally generated
archive fetched using git, svn, cvs or in rare circumstances, hg or bzr.
- Convenience macros for popular mirrors are defined. Using these macros will
make your package downloads more robust by mapping to a list of possible
source mirrors for archive availability.
- @SF - Sourceforge (downloads.sourceforge.net) with 5 retries due to
re-directs
- @GITHUB - Github (raw.githubusercontent.com) with 5 retries due to
re-directs
- @GNU - 8 regional servers
- @GNOME - 8 regional servers
- @SAVANNAH - 8 regional servers
- @APACHE - 8 regional servers
- @KERNEL - Linux kernel archives & mirrors
- Please _DO NOT_ use an archive which changes over time. A version labeled
"latest" is not constant each download. Also, using the head of a branch will
create unpredictable results which can be different each build.
#### Commits in your pull-requests should:
### Makefile contents should contain
* Have a useful description prefixed with the package name
(E.g.: "foopkg: Add libzot dependency")
* Include Signed-off-by in the comment
(See <https://dev.openwrt.org/wiki/SubmittingPatches#a10.Signyourwork>)
- Provide an up-to-date Copyright notice or **none**. Copyright should not be
assigned to OpenWrt unless you are explicitly requested by or working under
contract to OpenWrt. Assigning a Copyright to yourself or organization you
represent is acceptable.
- A (PKG\_)MAINTAINER definition listing either yourself and/or another person
responsible for this package (E.g.: PKG_MAINTAINER:= Joe D. Hacker
`<jdh@jdhs-email-provider.org`>). Listing multiple maintainers is encouraged in
order to keep the package active and up-to-date. Leaving this blank will also
be accepted, however the review process may not be as quick as one with a
maintainer.
- A PKG_LICENSE tag declaring the main license of the package. (E.g.:
PKG_LICENSE:=GPL-2.0-or-later) Please use SPDX identifiers if possible (see
list at the bottom).
- An optional PKG_LICENSE_FILES tag including the filenames of the
license-files in the source-package. (E.g.: PKG_LICENSE_FILES:=COPYING)
- PKG_RELEASE should be initially set to 1 or reset to 1 if the software
version is changed. You should increment it if the package itself has
changed. For example, modifying a support script, changing configure options
like --disable_ or --enable\_ switches, or if you changed something in the
package which causes the resulting binaries to be different. Changes like
correcting md5sums, changing mirror URLs, adding a maintainer field or updating
a comment or copyright year in a Makefile do not require a change to
PKG_RELEASE.
- Avoid reuse of PKG_NAME in call, define and eval lines to improve
readability.
### Advice on pull requests:
### Commits in your pull-requests should
Pull requests are the easiest way to contribute changes to git repos at Github. They are the preferred contribution method, as they offer a nice way for commenting and amending the proposed changes.
- Have a useful description prefixed with the package name (E.g.: "foopkg: Add
libzot dependency")
- Include Signed-off-by tag in the commit comments. See: [Sign your
work](https://openwrt.org/submitting-patches#sign_your_work)
## Advice on pull requests
Pull requests are the easiest way to contribute changes to git repos at Github.
They are the preferred contribution method, as they offer a nice way for
commenting and amending the proposed changes.
- You need a local "fork" of the Github repo.
- Use a "feature branch" for your changes. That separates the changes in the
pull request from your other changes and makes it easy to edit/amend commits
in the pull request. Workflow using "feature_x" as the example:
* You need a local "fork" of the Github repo.
* Use a "feature branch" for your changes. That separates the changes in the pull request from your other changes and makes it easy to edit/amend commits in the pull request. Workflow using "feature_x" as the example:
- Update your local git fork to the tip (of the master, usually)
- Create the feature branch with `git checkout -b feature_x`
- Edit changes and commit them locally
- Push them to your Github fork by `git push -u origin feature_x`. That
creates the "feature_x" branch at your Github fork and sets it as the
remote of this branch
- When you now visit Github, you should see a proposal to create a pull
request
- Push them to your Github fork by `git push -u origin feature_x`. That creates the "feature_x" branch at your Github fork and sets it as the remote of this branch
- When you now visit Github, you should see a proposal to create a pull request
- If you later need to add new commits to the pull request, you can simply
commit the changes to the local branch and then use `git push` to
automatically update the pull request.
* If you later need to add new commits to the pull request, you can simply commit the changes to the local branch and then use `git push` to automatically update the pull request.
- If you need to change something in the existing pull request (e.g. to add a
missing signed-off-by line to the commit message), you can use `git push -f`
to overwrite the original commits. That is easy and safe when using a feature
branch. Example workflow:
* If you need to change something in the existing pull request (e.g. to add a missing signed-off-by line to the commit message), you can use `git push -f` to overwrite the original commits. That is easy and safe when using a feature branch. Example workflow:
- Checkout the feature branch by `git checkout feature_x`
- Edit changes and commit them locally. If you are just updating the commit
message in the last commit, you can use `git commit --amend` to do that
- If you added several new commits or made other changes that require
cleaning up, you can use `git rebase -i HEAD~X` (X = number of commits to
edit) to possibly squash some commits
- Push the changed commits to Github with `git push -f` to overwrite the
original commits in the "feature_x" branch with the new ones. The pull
request gets automatically updated
- Edit changes and commit them locally. If you are just updating the commit message in the last commit, you can use `git commit --amend` to do that
- If you added several new commits or made other changes that require cleaning up, you can use `git rebase -i HEAD~X` (X = number of commits to edit) to possibly squash some commits
- Push the changed commits to Github with `git push -f` to overwrite the original commits in the "feature_x" branch with the new ones. The pull request gets automatically updated
## If you have commit access
### If you have commit access:
- Do NOT use git push --force.
- Do NOT commit to other maintainer's packages without their consent.
- Use Pull Requests if you are unsure and to suggest changes to other
maintainers.
* Do NOT use git push --force.
* Do NOT commit to other maintainer's packages without their consent.
* Use Pull Requests if you are unsure and to suggest changes to other maintainers.
### Gaining commit access
#### Gaining commit access:
- We will gladly grant commit access to responsible contributors who have made
* We will gladly grant commit access to responsible contributors who have made
useful pull requests and / or feedback or patches to this repository or
OpenWrt in general. Please include your request for commit access in your next
pull request or ticket.
OpenWrt in general. Please include your request for commit access in your
next pull request or ticket.
## Release Branches
### Release Branches:
- Old stable branches were named after the following pattern "for-XX.YY" (e.g.
for-14.07) before the LEDE split. During the LEDE split there was only one
release branch with the name "lede-17.01". After merging the LEDE fork with
OpenWrt the release branches are named according to the following pattern
"openwrt-XX.YY" (e.g. openwrt-18.06).
- These branches are built with the respective OpenWrt release and are created
* Branches named "for-XX.YY" (e.g. for-14.07) are release branches.
* These branches are built with the respective OpenWrt release and are created
during the release stabilisation phase.
- Please ONLY cherry-pick or commit security and bug-fixes to these branches.
- Do NOT add new packages and do NOT do major upgrades of packages here.
- If you are unsure if your change is suitable, please use a pull request.
* Please ONLY cherry-pick or commit security and bug-fixes to these branches.
* Do NOT add new packages and do NOT do major upgrades of packages here.
* If you are unsure if your change is suitable, please use a pull request.
## Common LICENSE tags (short list)
### Common LICENSE tags (short list)
(Complete list can be found at: <http://spdx.org/licenses>)
(Complete list can be found at: <https://spdx.org/licenses>)
| Full Name | Identifier |
| ------------------------------------------------ | :----------------------- |
| Apache License 1.0 | Apache-1.0 |
| Apache License 1.1 | Apache-1.1 |
| Apache License 2.0 | Apache-2.0 |
| Artistic License 1.0 | Artistic-1.0 |
| Artistic License 1.0 w/clause 8 | Artistic-1.0-cl8 |
| Artistic License 1.0 (Perl) | Artistic-1.0-Perl |
| Artistic License 2.0 | Artistic-2.0 |
| BSD 2-Clause "Simplified" License | BSD-2-Clause |
| BSD 2-Clause FreeBSD License | BSD-2-Clause-FreeBSD |
| BSD 2-Clause NetBSD License | BSD-2-Clause-NetBSD |
| BSD 3-Clause "New" or "Revised" License | BSD-3-Clause |
| BSD with attribution | BSD-3-Clause-Attribution |
| BSD 3-Clause Clear License | BSD-3-Clause-Clear |
| BSD 4-Clause "Original" or "Old" License | BSD-4-Clause |
| BSD-4-Clause (University of California-Specific) | BSD-4-Clause-UC |
| BSD Protection License | BSD-Protection |
| GNU General Public License v1.0 only | GPL-1.0-only |
| GNU General Public License v1.0 or later | GPL-1.0-or-later |
| GNU General Public License v2.0 only | GPL-2.0-only |
| GNU General Public License v2.0 or later | GPL-2.0-or-later |
| GNU General Public License v3.0 only | GPL-3.0-only |
| GNU General Public License v3.0 or later | GPL-3.0-or-later |
| GNU Lesser General Public License v2.1 only | LGPL-2.1-only |
| GNU Lesser General Public License v2.1 or later | LGPL-2.1-or-later |
| GNU Lesser General Public License v3.0 only | LGPL-3.0-only |
| GNU Lesser General Public License v3.0 or later | LGPL-3.0-or-later |
| GNU Library General Public License v2 only | LGPL-2.0-only |
| GNU Library General Public License v2 or later | LGPL-2.0-or-later |
| Fair License | Fair |
| ISC License | ISC |
| MIT License | MIT |
| No Limit Public License | NLPL |
| OpenSSL License | OpenSSL |
| X11 License | X11 |
| zlib License | Zlib |
## Continuous Integration
To simplify review and require less human resources, a CI tests all packages.
Passing CI tests are not a hard requirement but a good indicator what the
Buildbots will think about the proposed patch.
The CI builds modified packages for multiple architectures using the latest
snapshot SDK. For supported architectures (`aarch64_generic`,
`arm_cortex-a15_neon-vfpv4`, `i386_pentium4` and `x86_64`) an additional
runtime test is executed. A running OpenWrt is simulated which tries to install
created packages and runs a script called `test.sh` located next to the package
Makefile. The script is executed with the two arguments `PKG_NAME` and
`PKG_VERSION`. The `PKG_NAME` can be used to distinguish package variants, e.g.
`foobar` vs. `foobar-full`. The `PKG_VERSION` can be used for a trivial test
checking if `foobar --version` prints the correct version. `PKG_VERSION` is the
OpenWrt version and therefore includes the `PKG_RELEASE`, which isn't usually
part of the running programs version.
The following snippet shows a script that tests different binaries depending on
what IPK package was installed. The `gpsd` Makefile produces both a `gpsd` and
a `gpsd-clients` IPK packages.
```shell
#!/bin/sh
case "$1" in
"gpsd")
gpsd -V 2>&1 | grep "$2"
;;
"gpsd-clients")
cgps -V 2>&1 | grep "$2"
;;
esac
```
| Full Name | Identifier |
|---|:---|
|Apache License 1.0|Apache-1.0|
|Apache License 1.1|Apache-1.1|
|Apache License 2.0|Apache-2.0|
|Artistic License 1.0|Artistic-1.0|
|Artistic License 1.0 (Perl)|Artistic-1.0-Perl|
|Artistic License 1.0 w/clause 8|Artistic-1.0-cl8|
|Artistic License 2.0|Artistic-2.0|
|BSD 2-clause "Simplified" License|BSD-2-Clause|
|BSD 2-clause FreeBSD License|BSD-2-Clause-FreeBSD|
|BSD 2-clause NetBSD License|BSD-2-Clause-NetBSD|
|BSD 3-clause "New" or "Revised" License|BSD-3-Clause|
|BSD 3-clause Clear License|BSD-3-Clause-Clear|
|BSD 4-clause "Original" or "Old" License|BSD-4-Clause|
|BSD Protection License|BSD-Protection|
|BSD with attribution|BSD-3-Clause-Attribution|
|BSD-4-Clause (University of California-Specific)|BSD-4-Clause-UC|
|GNU General Public License v1.0 only|GPL-1.0|
|GNU General Public License v1.0 or later|GPL-1.0+|
|GNU General Public License v2.0 only|GPL-2.0|
|GNU General Public License v2.0 or later|GPL-2.0+|
|GNU General Public License v3.0 only|GPL-3.0|
|GNU General Public License v3.0 or later|GPL-3.0+|
|GNU Lesser General Public License v2.1 only|LGPL-2.1|
|GNU Lesser General Public License v2.1 or later|LGPL-2.1+|
|GNU Lesser General Public License v3.0 only|LGPL-3.0|
|GNU Lesser General Public License v3.0 or later|LGPL-3.0+|
|GNU Library General Public License v2 only|LGPL-2.0|
|GNU Library General Public License v2 or later|LGPL-2.0+|
|Fair License|Fair|
|ISC License|ISC|
|MIT License|MIT|
|No Limit Public License|NLPL|
|OpenSSL License|OpenSSL|
|X11 License|X11|
|zlib License|Zlib|

View file

@ -4,11 +4,11 @@
This is the OpenWrt "packages"-feed containing community-maintained build scripts, options and patches for applications, modules and libraries used within OpenWrt.
Installation of pre-built packages is handled directly by the **opkg** utility within your running OpenWrt system or by using the [OpenWrt SDK](https://openwrt.org/docs/guide-developer/using_the_sdk) on a build system.
Installation of pre-built packages is handled directly by the **opkg** utility within your running OpenWrt system or by using the [OpenWrt SDK](http://doc/howto/obtain.firmware.sdk) on a build system.
## Usage
This repository is intended to be layered on-top of an OpenWrt buildroot. If you do not have an OpenWrt buildroot installed, see the documentation at: [OpenWrt Buildroot Installation](https://openwrt.org/docs/guide-developer/build-system/install-buildsystem) on the OpenWrt support site.
This repository is intended to be layered on-top of an OpenWrt buildroot. If you do not have an OpenWrt buildroot installed, see the documentation at: [OpenWrt Buildroot Installation](http://wiki.openwrt.org/doc/howto/buildroot.exigence) on the OpenWrt support site.
This feed is enabled by default. To install all its package definitions, run:
```

View file

@ -1,54 +0,0 @@
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#
include $(TOPDIR)/rules.mk
PKG_NAME:=atop
PKG_RELEASE:=1
PKG_VERSION:=2.7.1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://www.atoptool.nl/download/
PKG_HASH:=ca48d2f17e071deead5e6e9cc9e388bf6a3270d695e61976b3794d4d927b5c4e
PKG_MAINTAINER:=Toni Uhlig <matzeton@googlemail.com>
PKG_LICENSE:=GPL-2.0-or-later
PKG_LICENSE_FILES:=COPYING
include $(INCLUDE_DIR)/package.mk
define Package/atop
SECTION:=admin
CATEGORY:=Administration
TITLE:=System and process monitor for Linux
DEPENDS:=+zlib +libncurses
URL:=https://www.atoptool.nl/
endef
define Package/atop/description
Atop is an ASCII full-screen performance monitor for
Linux that is capable of reporting the activity of all
processes (even if processes have finished during the
interval), daily logging of system and process activity
for long-term analysis, highlighting overloaded system
resources by using colors, etcetera. At regular
intervals, it shows system-level activity related to the
CPU, memory, swap, disks (including LVM) and network
layers, and for every process (and thread) it shows e.g.
the CPU utilization, memory growth, disk utilization,
priority, username, state, and exit code. In combination
with the optional kernel module netatop, it even shows
network activity per process/thread.
endef
MAKE_FLAGS += \
CFLAGS+="-Wno-misleading-indentation -Wno-unused-const-variable -Wno-format-truncation"
define Package/atop/install
$(INSTALL_DIR) $(1)/usr/bin
$(INSTALL_BIN) $(PKG_BUILD_DIR)/atop $(1)/usr/bin/
endef
$(eval $(call BuildPackage,atop))

View file

@ -1,11 +0,0 @@
--- a/Makefile
+++ b/Makefile
@@ -33,7 +33,7 @@ VERS = $(shell ./atop -V 2>/dev/null
all: atop atopsar atopacctd atopconvert atopcat
atop: atop.o $(ALLMODS) Makefile
- $(CC) atop.o $(ALLMODS) -o atop -lncursesw -lz -lm -lrt $(LDFLAGS)
+ $(CC) $(CFLAGS) atop.o $(ALLMODS) -o atop -lncursesw -lz -lm -lrt $(LDFLAGS)
atopsar: atop
ln -sf atop atopsar

View file

@ -1,69 +0,0 @@
# Copyright (C) 2018 OpenWrt
#
# Ideas used from the backuppc packaging in Debian GNU/Linux
#
include $(TOPDIR)/rules.mk
PKG_NAME:=backuppc
PKG_VERSION:=3.3.2
PKG_RELEASE:=3
PKG_SOURCE:=BackupPC-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=@SF/backuppc
PKG_HASH:=fbade2c8d8039297e826a75d2c39d5ac9a6f66e0c84c0cf8c4cef0bcf64d2152
PKG_BUILD_DIR:=$(BUILD_DIR)/BackupPC-$(PKG_VERSION)
PKG_MAINTAINER:=Carsten Wolff <carsten@wolffcarsten.de>
PKG_LICENSE:=GPL-2.0-or-later
PKG_LICENSE_FILES:=LICENSE
include $(INCLUDE_DIR)/package.mk
define Package/backuppc
SECTION:=admin
CATEGORY:=Administration
TITLE:=high-performance, enterprise-grade system for backing up PCs
URL:=https://sourceforge.net/projects/backuppc/
DEPENDS:=+perl +perl-www +perl-cgi +perlbase-digest +perlbase-compress +perlbase-archive +perlbase-data +perlbase-storable +perlbase-getopt +perl-file-rsyncp +openssh-client +tar +bzip2 +samba4-client +rsync +iputils-ping
endef
define Package/backuppc/description
BackupPC is a disk based backup system featuring a clever pooling scheme and
compression to minimize disk storage and disk I/O. It can use SMB, rsync or tar
to access the clients without any additional client software and offers a
powerful http/cgi user interface.
endef
define Build/Configure
true
endef
define Build/Compile
$(TARGET_CC) $(TARGET_CFLAGS) $(TARGET_CPPFLAGS) $(TARGET_LDFLAGS) -Wall -o $(PKG_BUILD_DIR)/BackupPC_Admin ./files/setuidwrapper.c
endef
define Package/backuppc/install
$(INSTALL_DIR) $(strip $(1))/etc/init.d
$(INSTALL_BIN) ./files/backuppc.init $(strip $(1))/etc/init.d/backuppc
cd $(PKG_BUILD_DIR) && ./configure.pl --batch --html-dir-url=/backuppc/ \
--html-dir=/www/backuppc/ --cgi-dir=/www/cgi-bin/ --no-fhs --uid-ignore \
--dest-dir=$(strip $(1)) --install-dir /usr/share/backuppc \
--hostname=XXXXXX --data-dir=/data/backuppc --log-dir=/data/backuppc/log \
--bin-path perl=/usr/bin/perl --bin-path tar=/bin/tar \
--bin-path smbclient=/usr/sbin/smbclient --bin-path nmblookup=/usr/sbin/nmblookup \
--bin-path rsync=/usr/bin/rsync --bin-path ping=/usr/bin/ping --bin-path df=/bin/df \
--bin-path ssh=/usr/bin/ssh --bin-path gzip=/bin/gzip \
--bin-path sendmail=/usr/sbin/sendmail --bin-path bzip2=/usr/bin/bzip2 \
--bin-path par2=
$(INSTALL_DIR) $(strip $(1))/usr/share/backuppc/conf
chmod 755 $(strip $(1))/data
mv $(strip $(1))/data/backuppc/conf/config.pl $(strip $(1))/usr/share/backuppc/conf/config.pl
patch --no-backup-if-mismatch $(strip $(1))/usr/share/backuppc/conf/config.pl ./files/fixup-config-pl.patch
mv $(strip $(1))/www/cgi-bin/BackupPC_Admin $(strip $(1))/usr/share/backuppc/bin/BackupPC_Admin_real
$(INSTALL_BIN) $(PKG_BUILD_DIR)/BackupPC_Admin $(strip $(1))/www/cgi-bin/BackupPC_Admin
$(INSTALL_DIR) $(strip $(1))/lib/upgrade/keep.d
$(INSTALL_DATA) files/backuppc.upgrade $(strip $(1))/lib/upgrade/keep.d/backuppc
endef
$(eval $(call BuildPackage,backuppc))

View file

@ -1,66 +0,0 @@
#!/bin/sh /etc/rc.common
. /lib/functions.sh
START=95
STOP=10
USE_PROCD=1
BACKUPPC_BIN="/usr/share/backuppc/bin/BackupPC"
BACKUPPC_USER=backuppc
# it would be better if it was possible to do this at install time, but we
# can't, because in case of an openwrt image bundled with backuppc, all
# ownerships other than root are lost.
preconfigure() {
# create backuppc group and user if needed
if ! group_exists backuppc; then
group_add backuppc 864
fi
if ! user_exists backuppc; then
user_add backuppc 864 864 "BackupPC user" /data/backuppc /bin/sh
fi
# install default config if none exists, yet
if [ ! -e /data/backuppc/conf/config.pl ]; then
cp /usr/share/backuppc/conf/config.pl /data/backuppc/conf/config.pl
fi
# ensure proper ownerships and rights
chown backuppc:backuppc /data/backuppc /data/backuppc/* \
/www/cgi-bin/BackupPC_Admin
chmod 750 /data/backuppc /data/backuppc/*
chmod 755 /usr/share/backuppc/bin/BackupPC_Admin_real
# The CGI needs to be world-executable, because uhttpd-cgi.c:386 checks
# for exactly that. We don't want that, but can't avoid it, currently.
chmod 6751 /www/cgi-bin/BackupPC_Admin
chown -R :backuppc /data/backuppc/conf
chmod 2770 /data/backuppc/conf
# protect webinterface with a random password by default
if [ -x /usr/sbin/uhttpd ] && ! grep -q backuppc /etc/httpd.conf >/dev/null 2>&1; then
PASS=$(perl -e 'print map{("a".."z","A".."Z",0..9)[int(rand(62))]}(1..8)')
PASSHASH=$(/usr/sbin/uhttpd -m "${PASS}")
echo "/cgi-bin/BackupPC_Admin:backuppc:${PASSHASH}" >> /etc/httpd.conf
uci set uhttpd.main.config=/etc/httpd.conf
/etc/init.d/uhttpd restart
# inform user
echo
echo "To protect access to the backuppc web interface, HTTP basic authentication in"
echo "uhttpd for http://$(/sbin/uci get "system.@system[0].hostname")/cgi-bin/BackupPC_Admin has been configured:"
echo "user: backuppc"
echo "pass: ${PASS}"
echo
echo "It is also recommended to follow the steps in"
echo "https://openwrt.org/docs/guide-user/services/webserver/uhttpd#securing_uhttpd"
echo "to secure access to uhttpd."
fi
}
start_service() {
# don't run preconfigure steps if called during image build
if [ -z "${IPKG_INSTROOT}" ]; then
preconfigure
fi
procd_open_instance
procd_set_param user $BACKUPPC_USER
procd_set_param reload_signal 1
procd_set_param command $BACKUPPC_BIN
}

View file

@ -1,2 +0,0 @@
/etc/httpd.conf
/data/backuppc/conf/

View file

@ -1,67 +0,0 @@
--- config.pl 2018-03-11 09:30:28.000000000 +0100
+++ config.pl.new 2018-04-05 08:40:29.180000000 +0200
@@ -41,7 +41,10 @@
#
# Host name on which the BackupPC server is running.
#
-$Conf{ServerHost} = 'XXXXXX';
+$ENV{'PATH'} = '/bin:/usr/bin';
+delete @ENV{'IFS', 'CDPATH', 'ENV', 'BASH_ENV'};
+$Conf{ServerHost} = $ENV{'HOSTNAME'};
+chomp($Conf{ServerHost});
#
# TCP port number on which the BackupPC server listens for and accepts
@@ -223,7 +226,7 @@
#
# Full path to various commands for archiving
#
-$Conf{SplitPath} = '/usr/bin/split';
+$Conf{SplitPath} = '/usr/bin/split' if ( -x '/usr/bin/split' );
$Conf{ParPath} = '';
$Conf{CatPath} = '/bin/cat';
$Conf{GzipPath} = '/bin/gzip';
@@ -1572,7 +1575,7 @@
# Full path for ssh. Security caution: normal users should not
# allowed to write to this file or directory.
#
-$Conf{SshPath} = '/usr/bin/ssh';
+$Conf{SshPath} = '/usr/bin/ssh' if ( -x '/usr/bin/ssh' );
#
# Full path for nmblookup. Security caution: normal users should not
@@ -1874,7 +1877,7 @@
# Full path to the sendmail command. Security caution: normal users
# should not allowed to write to this file or directory.
#
-$Conf{SendmailPath} = '/usr/sbin/sendmail';
+$Conf{SendmailPath} = '/usr/sbin/sendmail' if ( -x '/usr/sbin/sendmail' );
#
# Minimum period between consecutive emails to a single user.
@@ -2028,13 +2031,13 @@
# $Conf{CgiAdminUsers} = 'craig celia';
# --> administrative users are only craig and celia'.
#
-$Conf{CgiAdminUserGroup} = '';
-$Conf{CgiAdminUsers} = '';
+$Conf{CgiAdminUserGroup} = 'backuppc';
+$Conf{CgiAdminUsers} = 'backuppc';
#
# URL of the BackupPC_Admin CGI script. Used for email messages.
#
-$Conf{CgiURL} = 'http://XXXXXX/cgi-bin//BackupPC_Admin';
+$Conf{CgiURL} = 'http://' . $Conf{ServerHost} . '/cgi-bin//BackupPC_Admin';
#
# Language to use. See lib/BackupPC/Lang for the list of supported
@@ -2076,7 +2079,7 @@
# dates (MM/DD), a value of 2 uses full YYYY-MM-DD format, and zero
# for international dates (DD/MM).
#
-$Conf{CgiDateFormatMMDD} = 1;
+$Conf{CgiDateFormatMMDD} = 2;
#
# If set, the complete list of hosts appears in the left navigation

View file

@ -1,8 +0,0 @@
#include <unistd.h>
int main(int argc, char* argv[])
{
execv("/usr/share/backuppc/bin/BackupPC_Admin_real", argv);
return 0;
}

View file

@ -1,99 +0,0 @@
--- a/bin/BackupPC_archive
+++ b/bin/BackupPC_archive
@@ -299,7 +299,7 @@ sub ArchiveCleanup
if ( $NeedPostCmd ) {
UserCommandRun("ArchivePostUserCmd");
if ( $? && $Conf{UserCmdCheckStatus} ) {
- $stat{hostError} = "RestorePreUserCmd returned error status $?";
+ $stat{hostError} = "ArchivePostUserCmd returned error status $?";
$stat{xferOK} = 0;
}
}
--- a/bin/BackupPC_dump
+++ b/bin/BackupPC_dump
@@ -1067,7 +1067,7 @@ sub catch_signal
# Send ALRMs to BackupPC_tarExtract if we are using it
#
if ( $tarPid > 0 ) {
- kill($bpc->sigName2num("ARLM"), $tarPid);
+ kill($bpc->sigName2num("ALRM"), $tarPid);
}
#
--- a/configure.pl
+++ b/configure.pl
@@ -333,7 +333,10 @@ while ( 1 ) {
$Conf{BackupPCUser} || "backuppc",
"backuppc-user");
if ( $opts{"set-perms"} ) {
- ($name, $passwd, $Uid, $Gid) = getpwnam($Conf{BackupPCUser});
+ #($name, $passwd, $Uid, $Gid) = getpwnam($Conf{BackupPCUser});
+ $name = 'backuppc';
+ $Uid=`id -u`;
+ $Gid=`id -g`;
last if ( $name ne "" );
print <<EOF;
@@ -800,6 +803,7 @@ $Conf{ParPath} = '' if ( $Conf{ParPath}
#
# Figure out sensible arguments for the ping command
#
+$Conf{PingArgs} = '-c 1 $host';
if ( defined($Conf{PingArgs}) ) {
$Conf{PingCmd} = '$pingPath ' . $Conf{PingArgs};
} elsif ( !defined($Conf{PingCmd}) ) {
--- a/lib/BackupPC/CGI/View.pm
+++ b/lib/BackupPC/CGI/View.pm
@@ -46,7 +46,7 @@ sub action
my $compress = 0;
my $fh;
my $host = $In{host};
- my $num = $In{num};
+ my $num = ${EscHTML($In{num})};
my $type = $In{type};
my $linkHosts = 0;
my($file, $comment);
@@ -136,6 +136,10 @@ sub action
}
$s =~ s/[\n\r]+//g;
if ( $s =~ /smb: \\>/
+ || $s =~ /^tar:\d+\s/
+ || $s =~ /^ NTLMSSP_/
+ || $s =~ /^GENSEC backend /
+ || $s =~ /^doing parameter /
|| $s =~ /^\s*(\d+) \(\s*\d+\.\d kb\/s\) (.*)$/
|| $s =~ /^tar: dumped \d+ files/
|| $s =~ /^\s*added interface/i
--- a/lib/BackupPC/Lib.pm
+++ b/lib/BackupPC/Lib.pm
@@ -512,7 +512,8 @@ sub dirRead
}
if ( $IODirentOk ) {
@entries = sort({ $a->{inode} <=> $b->{inode} } readdirent($fh));
- map { $_->{type} = 0 + $_->{type} } @entries; # make type numeric
+ #map { $_->{type} = 0 + $_->{type} } @entries; # make type numeric
+ map { $_->{type} = 0 + $_->{type}; $_->{type} = undef if ($_->{type} eq BPC_DT_UNKNOWN); } @entries; # make type numeric, unset unknown types
} else {
@entries = map { { name => $_} } readdir($fh);
}
--- a/lib/BackupPC/Xfer/Smb.pm
+++ b/lib/BackupPC/Xfer/Smb.pm
@@ -219,7 +219,7 @@ sub readOutput
#
# MAKSYM 14082016: The next regex will never match on Samba-4.3, as
# smbclient doesn't produce output required; keeping it for older Sambas
- if ( /^\s*(-?\d+) \(\s*\d+[.,]\d kb\/s\) (.*)$/ ) {
+ if ( /^\s*(-?\d+) \(\s*\d+[.,]\d kb\/s\) (.*)$/ || /^tar:(\d+)\s+\+\+\+ (.*)$/ ) {
my $sambaFileSize = $1;
my $pcFileName = $2;
(my $fileName = $pcFileName) =~ s/\\/\//g;
@@ -281,6 +281,9 @@ sub readOutput
} elsif ( /smb: \\>/
|| /^\s*tar:\d+/ # MAKSYM 14082016: ignoring 2 more Samba-4.3 specific lines
|| /^\s*WARNING:/i
+ || /^ NTLMSSP_/
+ || /^GENSEC backend /
+ || /^doing parameter /
|| /^\s*added interface/i
|| /^\s*tarmode is now/i
|| /^\s*Total bytes written/i

View file

@ -1,39 +0,0 @@
# SPDX-License-Identifier: GPL-2.0-only
#
# Copyright (C) 2023 Luca Barbato
include $(TOPDIR)/rules.mk
PKG_NAME:=bottom
PKG_VERSION:=0.9.4
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://codeload.github.com/ClementTsang/bottom/tar.gz/$(PKG_VERSION)?
PKG_HASH:=199123ef354bcabaa8a2e3b7b477b324f5b647d503a2599d08296733846eea6e
PKG_MAINTAINER:=Luca Barbato <lu_zero@luminem.org>
PKG_LICENSE:=MIT
PKG_LICENSE_FILES:=LICENSE
PKG_BUILD_DEPENDS:=rust/host
PKG_BUILD_PARALLEL:=1
include $(INCLUDE_DIR)/package.mk
include ../../lang/rust/rust-package.mk
define Package/bottom
SECTION:=admin
CATEGORY:=Administration
TITLE:=Interactive processes viewer
DEPENDS:=$(RUST_ARCH_DEPENDS)
URL:=https://github.com/ClementTsang/bottom
endef
define Package/bottom/description
A customizable cross-platform graphical process/system monitor
for the terminal.
endef
$(eval $(call RustBinPackage,bottom))
$(eval $(call BuildPackage,bottom))

View file

@ -1,55 +0,0 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=btop
PKG_VERSION:=1.3.0
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL=https://codeload.github.com/aristocratos/btop/tar.gz/v$(PKG_VERSION)?
PKG_HASH:=375e078ce2091969f0cd14030620bd1a94987451cf7a73859127a786006a32cf
PKG_MAINTAINER:=Tianling Shen <cnsztl@immortalwrt.org>
PKG_LICENSE:=Apache-2.0
PKG_LICENSE_FILES:=LICENSE
PKG_BUILD_FLAGS:=no-lto
PKG_BUILD_PARALLEL:=1
PKG_INSTALL:=1
include $(INCLUDE_DIR)/package.mk
define Package/btop
SECTION:=admin
CATEGORY:=Administration
TITLE:=A monitor of resources
URL:=https://github.com/aristocratos/btop
DEPENDS:=+libstdcpp
endef
define Package/btop/description
Resource monitor that shows usage and stats for processor, memory,
disks, network and processes.
C++ version and continuation of bashtop and bpytop.
endef
MAKE_FLAGS+= \
PLATFORM=Linux \
OPTFLAGS="$(TARGET_CXXFLAGS)" \
LDCXXFLAGS="$(TARGET_LDFLAGS) -pthread"
ifneq ($(CONFIG_USE_MUSL),)
TARGET_CFLAGS += -D_LARGEFILE64_SOURCE
endif
define Package/btop/install
$(INSTALL_DIR) $(1)/usr/bin
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/local/bin/btop $(1)/usr/bin/
$(INSTALL_DIR) $(1)/usr/share
$(CP) $(PKG_INSTALL_DIR)/usr/local/share/btop $(1)/usr/share/
$(INSTALL_DIR) $(1)/etc/profile.d
$(CP) $(CURDIR)/files/btop.sh $(1)/etc/profile.d/
endef
$(eval $(call BuildPackage,btop))

View file

@ -1 +0,0 @@
alias btop="btop --utf-force"

View file

@ -1,3 +0,0 @@
#!/bin/sh
btop --version | grep "$PKG_VERSION"

View file

@ -1,42 +0,0 @@
include $(TOPDIR)/rules.mk
include $(INCLUDE_DIR)/kernel.mk
PKG_NAME:=debian-archive-keyring
PKG_VERSION:=2023.4
PKG_HASH:=6e93a87b9e50bd81518880ec07a62f95d7d8452f4aa703f5b0a3076439f1022c
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)_$(PKG_VERSION)_all.deb
PKG_SOURCE_URL:=http://ftp.debian.org/debian/pool/main/d/$(PKG_NAME)/
PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-$(PKG_VERSION)
PKG_MAINTAINER:=Daniel Golle <daniel@makrotopia.org>
PKG_LICENSE:=Unique
PKG_LICENSE_FILES:=usr/share/doc/debian-archive-keyring/copyright
include $(INCLUDE_DIR)/package.mk
define Package/debian-archive-keyring
SECTION:=admin
CATEGORY:=Administration
TITLE:=Debian Archive keyring
URL:=https://salsa.debian.org/release-team/debian-archive-keyring
PKGARCH:=all
endef
define Build/Prepare
$(AR) p $(DL_DIR)/$(PKG_SOURCE) data.tar.xz | $(TAR) -xJC $(PKG_BUILD_DIR)
endef
define Build/Configure
endef
define Build/Compile
endef
define Package/debian-archive-keyring/install
$(INSTALL_DIR) $(1)/usr/share/keyrings
$(INSTALL_DATA) $(PKG_BUILD_DIR)/usr/share/keyrings/*.gpg $(1)/usr/share/keyrings
endef
$(eval $(call BuildPackage,debian-archive-keyring))

View file

@ -9,14 +9,13 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=debootstrap
PKG_VERSION:=1.0.128+nmu2+deb12u1
PKG_VERSION:=1.0.67
PKG_RELEASE:=1
PKG_MAINTAINER=Daniel Golle <daniel@makrotopia.org>
PKG_SOURCE:=$(PKG_NAME)-udeb_$(PKG_VERSION)_all.udeb
PKG_SOURCE_URL:=@DEBIAN/pool/main/d/debootstrap
PKG_HASH:=4fa4ec7c144ed047c47d0d8eb9b91b56eaa9b2db2b52510777abbabf5965d268
PKG_MAINTAINER:=Daniel Golle <daniel@makrotopia.org>
PKG_SOURCE_URL:=http://ftp.debian.org/debian/pool/main/d/debootstrap
PKG_MD5SUM:=e7854d4b10ab860f08921525406debdd
PKG_LICENSE:=Unique
PKG_LICENSE_FILES:=debian/copyright
@ -28,8 +27,8 @@ define Package/debootstrap
SECTION:=admin
CATEGORY:=Administration
TITLE:=Bootstrap a basic Debian system
URL:=https://wiki.debian.org/Debootstrap
DEPENDS:= +coreutils +coreutils-chroot +coreutils-sha1sum +ar +xz-utils +xz
URL:=http://wiki.debian.org/Debootstrap
DEPENDS:= +coreutils +coreutils-chroot +coreutils-sha1sum +ar
endef
define Package/debootstrap/description
@ -50,8 +49,9 @@ define Package/debootstrap/install
$(INSTALL_DIR) $(1)/usr/share/debootstrap
$(INSTALL_BIN) $(PKG_BUILD_DIR)/usr/share/debootstrap/pkgdetails $(1)/usr/share/debootstrap
$(INSTALL_DATA) $(PKG_BUILD_DIR)/usr/share/debootstrap/functions $(1)/usr/share/debootstrap
$(INSTALL_DATA) $(PKG_BUILD_DIR)/usr/share/debootstrap/devices.tar.gz $(1)/usr/share/debootstrap
$(INSTALL_DIR) $(1)/usr/share/debootstrap/scripts
$(CP) $(PKG_BUILD_DIR)/usr/share/debootstrap/scripts/* $(1)/usr/share/debootstrap/scripts
$(INSTALL_DATA) $(PKG_BUILD_DIR)/usr/share/debootstrap/scripts/* $(1)/usr/share/debootstrap/scripts
endef
$(eval $(call BuildPackage,debootstrap))

View file

@ -1,4 +1,3 @@
#define _GNU_SOURCE
#include <stdio.h>
#include <stdlib.h>
#include <string.h>

View file

@ -1,10 +0,0 @@
--- a/usr/share/debootstrap/functions
+++ b/usr/share/debootstrap/functions
@@ -78,7 +78,6 @@ progress_next () {
}
wgetprogress () {
- [ ! "$VERBOSE" ] && NVSWITCH="-nv"
local ret=0
if [ "$USE_DEBIANINSTALLER_INTERACTION" ] && [ "$PROGRESS_NEXT" ]; then
# The exit status of a pipeline is that of the last command in

View file

@ -0,0 +1,11 @@
--- a/usr/share/debootstrap/functions
+++ b/usr/share/debootstrap/functions
@@ -859,8 +859,6 @@ choose_extractor () {
if [ -n "$EXTRACTOR_OVERRIDE" ]; then
extractor="$EXTRACTOR_OVERRIDE"
- elif type dpkg-deb >/dev/null 2>&1; then
- extractor="dpkg-deb"
else
extractor="ar"
fi

View file

@ -1,61 +0,0 @@
#
# Copyright (C) 2007-2018 OpenWrt.org
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#
include $(TOPDIR)/rules.mk
PKG_NAME:=gkrellmd
PKG_VERSION:=2.3.11
PKG_RELEASE:=1
PKG_SOURCE:=gkrellm-$(PKG_VERSION).tar.bz2
PKG_SOURCE_URL:=http://gkrellm.srcbox.net/releases
PKG_HASH:=1ee0643ed9ed99f88c1504c89d9ccb20780cf29319c904b68e80a8e7c8678c06
PKG_BUILD_DIR:=$(BUILD_DIR)/gkrellm-$(PKG_VERSION)
PKG_MAINTAINER:=Peter Denison <openwrt@marshadder.org>
PKG_LICENSE:=GPL-2.0-or-later
PKG_LICENSE_FILES:=COPYING
include $(INCLUDE_DIR)/package.mk
include $(INCLUDE_DIR)/nls.mk
define Package/gkrellmd
SECTION:=admin
CATEGORY:=Administration
DEPENDS:=+glib2
TITLE:=The GNU Krell Monitors Server
URL:=http://gkrellm.net/
endef
define Package/gkrellmd/description
Gkrellmd listens for connections from gkrellm clients. When
a gkrellm client connects to a gkrellmd server all builtin
monitors collect their data from the server.
endef
define Package/gkrellmd/conffiles
/etc/$(PKG_NAME).conf
endef
define Build/Compile
$(MAKE) -C $(PKG_BUILD_DIR)/server \
CC="$(TARGET_CC)" \
CFLAGS="$(TARGET_CFLAGS) $(TARGET_CPPFLAGS)" \
LDFLAGS="$(TARGET_LDFLAGS) " \
without-libsensors="yes"
endef
define Package/gkrellmd/install
$(INSTALL_DIR) $(1)/usr/bin
$(INSTALL_BIN) $(PKG_BUILD_DIR)/server/$(PKG_NAME) $(1)/usr/bin/
$(INSTALL_DIR) $(1)/etc
$(INSTALL_CONF) $(PKG_BUILD_DIR)/server/$(PKG_NAME).conf $(1)/etc/
$(INSTALL_DIR) $(1)/etc/init.d
$(INSTALL_BIN) ./files/$(PKG_NAME).init $(1)/etc/init.d/$(PKG_NAME)
endef
$(eval $(call BuildPackage,gkrellmd))

View file

@ -1,16 +0,0 @@
#!/bin/sh /etc/rc.common
# Copyright (C) 2007 OpenWrt.org
START=60
BIN=gkrellmd
RUN_D=/var/run
PID_F=$RUN_D/$BIN.pid
start() {
mkdir -p $RUN_D
$BIN $OPTIONS
}
stop() {
[ -f $PID_F ] && kill $(cat $PID_F)
}

View file

@ -1,33 +0,0 @@
--- a/server/gkrellmd.conf
+++ b/server/gkrellmd.conf
@@ -4,7 +4,7 @@
# the client update frequency. Values may be from 1 to 10 and should be
# smaller values to reduce network traffic.
#
-#update-hz 3
+update-hz 10
# Limit number of simultaneous clients allowed to connect.
#
@@ -30,18 +30,18 @@
# Drop privileges after startup (you must start gkrellmd as root to do it).
# NOTE: Option ignored on Windows
#
-#user nobody
+user nobody
#group proc
# Create a PID file for the running gkrellmd. Default is no PID file.
# NOTE: Option ignored on Windows
#
-#pidfile /var/run/gkrellmd.pid
+pidfile /var/run/gkrellmd.pid
# Run in background and detach from the controlling terminal
# NOTE: Option ignored on Windows
#
-#detach
+detach
# Enable writing logging message to the system syslog file
# NOTE: On windows this enables logging to the windows event log

View file

@ -1,5 +1,5 @@
#
# Copyright (C) 2007-2016 OpenWrt.org
# Copyright (C) 2007-2014 OpenWrt.org
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
@ -8,25 +8,19 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=htop
PKG_VERSION:=3.3.0
PKG_VERSION:=1.0.3
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://codeload.github.com/htop-dev/htop/tar.gz/$(PKG_VERSION)?
PKG_HASH:=1e5cc328eee2bd1acff89f860e3179ea24b85df3ac483433f92a29977b14b045
PKG_SOURCE_URL:=http://hisham.hm/htop/releases/$(PKG_VERSION)/
PKG_MD5SUM:=e768b9b55c033d9c1dffda72db3a6ac7
PKG_LICENSE:=GPL-2.0-or-later
PKG_LICENSE:=GPL-2.0
PKG_LICENSE_FILES:=COPYING
PKG_CPE_ID:=cpe:/a:htop:htop
PKG_FIXUP:=autoreconf
PKG_BUILD_PARALLEL:=1
PKG_INSTALL:=1
PKG_CONFIG_DEPENDS:= CONFIG_HTOP_LMSENSORS
PKG_BUILD_DEPENDS:= HTOP_LMSENSORS:lm-sensors
include $(INCLUDE_DIR)/package.mk
define Package/htop
@ -34,7 +28,7 @@ define Package/htop
CATEGORY:=Administration
TITLE:=Interactive processes viewer
DEPENDS:=+libncurses
URL:=https://hisham.hm/htop/
URL:=http://htop.sourceforge.net/
MAINTAINER:=Etienne CHAMPETIER <champetier.etienne@gmail.com>
endef
@ -44,29 +38,16 @@ define Package/htop/description
see all processes and their full command lines.
endef
define Package/htop/config
config HTOP_LMSENSORS
bool "Compile Htop with lm-sensors support"
depends on PACKAGE_htop
default y if TARGET_x86
help
Build htop with lm-sensors support.
This doesn't add lm-sensors as dependency,
if present it'll loaded using dlopen().
endef
CONFIGURE_ARGS += \
--$(if $(CONFIG_HTOP_LMSENSORS),en,dis)able-sensors \
--enable-affinity \
--disable-capabilities \
--disable-delayacct \
--disable-native-affinity \
--disable-unicode \
--disable-unwind \
--disable-hwloc
--enable-hwloc
CONFIGURE_VARS += \
ac_cv_file__proc_stat=yes \
ac_cv_file__proc_meminfo=yes
ac_cv_file__proc_meminfo=yes \
ac_cv_func_malloc_0_nonnull=yes \
ac_cv_func_realloc_0_nonnull=yes
define Package/htop/install
$(INSTALL_DIR) $(1)/usr/bin

View file

@ -1,51 +0,0 @@
#
# Copyright (C) 2017 Alexander Couzens <lynxis@fe80.eu>
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#
include $(TOPDIR)/rules.mk
PKG_NAME:=ipmitool
PKG_VERSION:=1.8.18
PKG_RELEASE:=5
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
PKG_SOURCE_URL:=@SF/$(PKG_NAME)
PKG_HASH:=0c1ba3b1555edefb7c32ae8cd6a3e04322056bc087918f07189eeedfc8b81e01
PKG_LICENSE:=BSD-3-clause
PKG_LICENSE_FILES:=COPYING
PKG_CPE_ID:=cpe:/a:ipmitool_project:ipmitool
include $(INCLUDE_DIR)/package.mk
define Package/ipmitool
SECTION:=admin
CATEGORY:=Administration
DEPENDS:=+libopenssl +libncurses +libreadline
TITLE:=Command-line interface to IPMI-enabled devices
URL:=https://github.com/ipmitool/ipmitool
MAINTAINER:=Alexander Couzens <lynxis@fe80.eu>
endef
define Package/ipmitool/Default/description
Command-line interface to IPMI-enabled devices
endef
define Package/ipmitool/install
$(INSTALL_DIR) $(1)/usr/sbin/
$(INSTALL_BIN) $(PKG_BUILD_DIR)/src/ipmievd $(1)/usr/sbin/
$(INSTALL_BIN) $(PKG_BUILD_DIR)/src/ipmitool $(1)/usr/sbin/
endef
CONFIGURE_ARGS += \
--enable-intf-lan \
--enable-intf-lanplus \
--enable-intf-serial \
--enable-intf-free \
--enable-intf-open \
--enable-intf-imb \
--enable-ipmishell
$(eval $(call BuildPackage,ipmitool))

View file

@ -1,99 +0,0 @@
From b57487e360916ab3eaa50aa6d021c73b6337a4a0 Mon Sep 17 00:00:00 2001
From: Dennis Schridde <dennis.schridde@uni-heidelberg.de>
Date: Wed, 30 Nov 2016 17:33:00 +0100
Subject: [PATCH 1/4] ID:461 - OpenSSL 1.1 compatibility - "error: storage size
of 'ctx' isn't known"
In OpenSSL 1.1 EVP_CIPHER_CTX became opaque, cf. `man 3ssl EVP_EncryptInit`
Fixes: ID:461
---
src/plugins/lanplus/lanplus_crypt_impl.c | 28 ++++++++++++++--------------
1 file changed, 14 insertions(+), 14 deletions(-)
--- a/src/plugins/lanplus/lanplus_crypt_impl.c
+++ b/src/plugins/lanplus/lanplus_crypt_impl.c
@@ -164,10 +164,10 @@ lanplus_encrypt_aes_cbc_128(const uint8_
uint8_t * output,
uint32_t * bytes_written)
{
- EVP_CIPHER_CTX ctx;
- EVP_CIPHER_CTX_init(&ctx);
- EVP_EncryptInit_ex(&ctx, EVP_aes_128_cbc(), NULL, key, iv);
- EVP_CIPHER_CTX_set_padding(&ctx, 0);
+ EVP_CIPHER_CTX* ctx;
+ EVP_CIPHER_CTX_init(ctx);
+ EVP_EncryptInit_ex(ctx, EVP_aes_128_cbc(), NULL, key, iv);
+ EVP_CIPHER_CTX_set_padding(ctx, 0);
*bytes_written = 0;
@@ -191,7 +191,7 @@ lanplus_encrypt_aes_cbc_128(const uint8_
assert((input_length % IPMI_CRYPT_AES_CBC_128_BLOCK_SIZE) == 0);
- if(!EVP_EncryptUpdate(&ctx, output, (int *)bytes_written, input, input_length))
+ if(!EVP_EncryptUpdate(ctx, output, (int *)bytes_written, input, input_length))
{
/* Error */
*bytes_written = 0;
@@ -201,7 +201,7 @@ lanplus_encrypt_aes_cbc_128(const uint8_
{
uint32_t tmplen;
- if(!EVP_EncryptFinal_ex(&ctx, output + *bytes_written, (int *)&tmplen))
+ if(!EVP_EncryptFinal_ex(ctx, output + *bytes_written, (int *)&tmplen))
{
*bytes_written = 0;
return; /* Error */
@@ -210,7 +210,7 @@ lanplus_encrypt_aes_cbc_128(const uint8_
{
/* Success */
*bytes_written += tmplen;
- EVP_CIPHER_CTX_cleanup(&ctx);
+ EVP_CIPHER_CTX_cleanup(ctx);
}
}
}
@@ -239,10 +239,10 @@ lanplus_decrypt_aes_cbc_128(const uint8_
uint8_t * output,
uint32_t * bytes_written)
{
- EVP_CIPHER_CTX ctx;
- EVP_CIPHER_CTX_init(&ctx);
- EVP_DecryptInit_ex(&ctx, EVP_aes_128_cbc(), NULL, key, iv);
- EVP_CIPHER_CTX_set_padding(&ctx, 0);
+ EVP_CIPHER_CTX* ctx;
+ EVP_CIPHER_CTX_init(ctx);
+ EVP_DecryptInit_ex(ctx, EVP_aes_128_cbc(), NULL, key, iv);
+ EVP_CIPHER_CTX_set_padding(ctx, 0);
if (verbose >= 5)
@@ -266,7 +266,7 @@ lanplus_decrypt_aes_cbc_128(const uint8_
assert((input_length % IPMI_CRYPT_AES_CBC_128_BLOCK_SIZE) == 0);
- if (!EVP_DecryptUpdate(&ctx, output, (int *)bytes_written, input, input_length))
+ if (!EVP_DecryptUpdate(ctx, output, (int *)bytes_written, input, input_length))
{
/* Error */
lprintf(LOG_DEBUG, "ERROR: decrypt update failed");
@@ -277,7 +277,7 @@ lanplus_decrypt_aes_cbc_128(const uint8_
{
uint32_t tmplen;
- if (!EVP_DecryptFinal_ex(&ctx, output + *bytes_written, (int *)&tmplen))
+ if (!EVP_DecryptFinal_ex(ctx, output + *bytes_written, (int *)&tmplen))
{
char buffer[1000];
ERR_error_string(ERR_get_error(), buffer);
@@ -290,7 +290,7 @@ lanplus_decrypt_aes_cbc_128(const uint8_
{
/* Success */
*bytes_written += tmplen;
- EVP_CIPHER_CTX_cleanup(&ctx);
+ EVP_CIPHER_CTX_cleanup(ctx);
}
}

View file

@ -1,31 +0,0 @@
From 77fe5635037ebaf411cae46cf5045ca819b5c145 Mon Sep 17 00:00:00 2001
From: Zdenek Styblik <stybla@turnovfree.net>
Date: Sun, 15 Jan 2017 15:11:25 +0100
Subject: [PATCH 2/4] ID:461 - Make compiler happier about changes related to
OpenSSL 1.1
Complaint was that ctx isn't initialized.
---
src/plugins/lanplus/lanplus_crypt_impl.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
--- a/src/plugins/lanplus/lanplus_crypt_impl.c
+++ b/src/plugins/lanplus/lanplus_crypt_impl.c
@@ -164,7 +164,7 @@ lanplus_encrypt_aes_cbc_128(const uint8_
uint8_t * output,
uint32_t * bytes_written)
{
- EVP_CIPHER_CTX* ctx;
+ EVP_CIPHER_CTX *ctx = NULL;
EVP_CIPHER_CTX_init(ctx);
EVP_EncryptInit_ex(ctx, EVP_aes_128_cbc(), NULL, key, iv);
EVP_CIPHER_CTX_set_padding(ctx, 0);
@@ -239,7 +239,7 @@ lanplus_decrypt_aes_cbc_128(const uint8_
uint8_t * output,
uint32_t * bytes_written)
{
- EVP_CIPHER_CTX* ctx;
+ EVP_CIPHER_CTX *ctx = NULL;
EVP_CIPHER_CTX_init(ctx);
EVP_DecryptInit_ex(ctx, EVP_aes_128_cbc(), NULL, key, iv);
EVP_CIPHER_CTX_set_padding(ctx, 0);

View file

@ -1,48 +0,0 @@
From f004b4b7197fc83e7d47ec8cbcaefffa9a922717 Mon Sep 17 00:00:00 2001
From: Zdenek Styblik <stybla@turnovfree.net>
Date: Sun, 12 Mar 2017 14:00:35 +0100
Subject: [PATCH 3/4] ID:480 - ipmitool coredumps in EVP_CIPHER_CTX_init
IPMI tool coredumps due to changes introduced in ID:461. This shouldn't be
surprise as a NULL pointer is passed to init. Commit addresses this issue by
calling EVP_CIPHER_CTX_new() instead of EVP_CIPHER_CTX_init(), which is
deprecated, and by checking return value of call to former function.
---
src/plugins/lanplus/lanplus_crypt_impl.c | 14 ++++++++++----
1 file changed, 10 insertions(+), 4 deletions(-)
--- a/src/plugins/lanplus/lanplus_crypt_impl.c
+++ b/src/plugins/lanplus/lanplus_crypt_impl.c
@@ -165,10 +165,13 @@ lanplus_encrypt_aes_cbc_128(const uint8_
uint32_t * bytes_written)
{
EVP_CIPHER_CTX *ctx = NULL;
- EVP_CIPHER_CTX_init(ctx);
+ ctx = EVP_CIPHER_CTX_new();
+ if (ctx == NULL) {
+ *bytes_written = 0;
+ return;
+ }
EVP_EncryptInit_ex(ctx, EVP_aes_128_cbc(), NULL, key, iv);
EVP_CIPHER_CTX_set_padding(ctx, 0);
-
*bytes_written = 0;
@@ -240,11 +243,14 @@ lanplus_decrypt_aes_cbc_128(const uint8_
uint32_t * bytes_written)
{
EVP_CIPHER_CTX *ctx = NULL;
- EVP_CIPHER_CTX_init(ctx);
+ ctx = EVP_CIPHER_CTX_new();
+ if (ctx == NULL) {
+ *bytes_written = 0;
+ return;
+ }
EVP_DecryptInit_ex(ctx, EVP_aes_128_cbc(), NULL, key, iv);
EVP_CIPHER_CTX_set_padding(ctx, 0);
-
if (verbose >= 5)
{
printbuf(iv, 16, "decrypting with this IV");

View file

@ -1,139 +0,0 @@
From 1664902525a1c3771b4d8b3ccab7ea1ba6b2bdd1 Mon Sep 17 00:00:00 2001
From: Holger Liebig <holger.liebig@ts.fujitsu.com>
Date: Tue, 4 Apr 2017 20:43:05 +0200
Subject: [PATCH 4/4] ID:480 - Call EVP_CIPHER_CTX_free() instead of
EVP_CIPHER_CTX_cleanup()
Call EVP_CIPHER_CTX_free() instead of EVP_CIPHER_CTX_cleanup() to fix memory
leak.
---
src/plugins/lanplus/lanplus_crypt_impl.c | 44 +++++++++++++++++---------------
1 file changed, 23 insertions(+), 21 deletions(-)
--- a/src/plugins/lanplus/lanplus_crypt_impl.c
+++ b/src/plugins/lanplus/lanplus_crypt_impl.c
@@ -165,13 +165,6 @@ lanplus_encrypt_aes_cbc_128(const uint8_
uint32_t * bytes_written)
{
EVP_CIPHER_CTX *ctx = NULL;
- ctx = EVP_CIPHER_CTX_new();
- if (ctx == NULL) {
- *bytes_written = 0;
- return;
- }
- EVP_EncryptInit_ex(ctx, EVP_aes_128_cbc(), NULL, key, iv);
- EVP_CIPHER_CTX_set_padding(ctx, 0);
*bytes_written = 0;
@@ -185,6 +178,14 @@ lanplus_encrypt_aes_cbc_128(const uint8_
printbuf(input, input_length, "encrypting this data");
}
+ ctx = EVP_CIPHER_CTX_new();
+ if (ctx == NULL) {
+ lprintf(LOG_DEBUG, "ERROR: EVP_CIPHER_CTX_new() failed");
+ return;
+ }
+ EVP_CIPHER_CTX_init(ctx);
+ EVP_EncryptInit_ex(ctx, EVP_aes_128_cbc(), NULL, key, iv);
+ EVP_CIPHER_CTX_set_padding(ctx, 0);
/*
* The default implementation adds a whole block of padding if the input
@@ -198,7 +199,6 @@ lanplus_encrypt_aes_cbc_128(const uint8_
{
/* Error */
*bytes_written = 0;
- return;
}
else
{
@@ -206,16 +206,17 @@ lanplus_encrypt_aes_cbc_128(const uint8_
if(!EVP_EncryptFinal_ex(ctx, output + *bytes_written, (int *)&tmplen))
{
+ /* Error */
*bytes_written = 0;
- return; /* Error */
}
else
{
/* Success */
*bytes_written += tmplen;
- EVP_CIPHER_CTX_cleanup(ctx);
}
}
+ /* performs cleanup and free */
+ EVP_CIPHER_CTX_free(ctx);
}
@@ -243,13 +244,6 @@ lanplus_decrypt_aes_cbc_128(const uint8_
uint32_t * bytes_written)
{
EVP_CIPHER_CTX *ctx = NULL;
- ctx = EVP_CIPHER_CTX_new();
- if (ctx == NULL) {
- *bytes_written = 0;
- return;
- }
- EVP_DecryptInit_ex(ctx, EVP_aes_128_cbc(), NULL, key, iv);
- EVP_CIPHER_CTX_set_padding(ctx, 0);
if (verbose >= 5)
{
@@ -258,12 +252,20 @@ lanplus_decrypt_aes_cbc_128(const uint8_
printbuf(input, input_length, "decrypting this data");
}
-
*bytes_written = 0;
if (input_length == 0)
return;
+ ctx = EVP_CIPHER_CTX_new();
+ if (ctx == NULL) {
+ lprintf(LOG_DEBUG, "ERROR: EVP_CIPHER_CTX_new() failed");
+ return;
+ }
+ EVP_CIPHER_CTX_init(ctx);
+ EVP_DecryptInit_ex(ctx, EVP_aes_128_cbc(), NULL, key, iv);
+ EVP_CIPHER_CTX_set_padding(ctx, 0);
+
/*
* The default implementation adds a whole block of padding if the input
* data is perfectly aligned. We would like to keep that from happening.
@@ -277,7 +279,6 @@ lanplus_decrypt_aes_cbc_128(const uint8_
/* Error */
lprintf(LOG_DEBUG, "ERROR: decrypt update failed");
*bytes_written = 0;
- return;
}
else
{
@@ -285,20 +286,21 @@ lanplus_decrypt_aes_cbc_128(const uint8_
if (!EVP_DecryptFinal_ex(ctx, output + *bytes_written, (int *)&tmplen))
{
+ /* Error */
char buffer[1000];
ERR_error_string(ERR_get_error(), buffer);
lprintf(LOG_DEBUG, "the ERR error %s", buffer);
lprintf(LOG_DEBUG, "ERROR: decrypt final failed");
*bytes_written = 0;
- return; /* Error */
}
else
{
/* Success */
*bytes_written += tmplen;
- EVP_CIPHER_CTX_cleanup(ctx);
}
}
+ /* performs cleanup and free */
+ EVP_CIPHER_CTX_free(ctx);
if (verbose >= 5)
{

View file

@ -1,42 +0,0 @@
From cf39da53236abf02d39c6a98a645488933f3e861 Mon Sep 17 00:00:00 2001
From: Rosen Penev <rosenp@gmail.com>
Date: Tue, 21 Aug 2018 19:29:07 -0700
Subject: [PATCH] ipmitool: Fix compile with deprecated APIs disabled.
From the man page:
EVP_CIPHER_CTX was made opaque in OpenSSL 1.1.0. As a result,
EVP_CIPHER_CTX_reset() appeared and EVP_CIPHER_CTX_cleanup() disappeared.
EVP_CIPHER_CTX_init() remains as an alias for EVP_CIPHER_CTX_reset().
Signed-off-by: Rosen Penev <rosenp@gmail.com>
---
src/plugins/lanplus/lanplus_crypt_impl.c | 8 ++++++++
1 file changed, 8 insertions(+)
--- a/src/plugins/lanplus/lanplus_crypt_impl.c
+++ b/src/plugins/lanplus/lanplus_crypt_impl.c
@@ -183,7 +183,11 @@ lanplus_encrypt_aes_cbc_128(const uint8_
lprintf(LOG_DEBUG, "ERROR: EVP_CIPHER_CTX_new() failed");
return;
}
+#if OPENSSL_VERSION_NUMBER < 0x10100000L
EVP_CIPHER_CTX_init(ctx);
+#else
+ EVP_CIPHER_CTX_reset(ctx);
+#endif
EVP_EncryptInit_ex(ctx, EVP_aes_128_cbc(), NULL, key, iv);
EVP_CIPHER_CTX_set_padding(ctx, 0);
@@ -262,7 +266,11 @@ lanplus_decrypt_aes_cbc_128(const uint8_
lprintf(LOG_DEBUG, "ERROR: EVP_CIPHER_CTX_new() failed");
return;
}
+#if OPENSSL_VERSION_NUMBER < 0x10100000L
EVP_CIPHER_CTX_init(ctx);
+#else
+ EVP_CIPHER_CTX_reset(ctx);
+#endif
EVP_DecryptInit_ex(ctx, EVP_aes_128_cbc(), NULL, key, iv);
EVP_CIPHER_CTX_set_padding(ctx, 0);

View file

@ -1,123 +0,0 @@
From 960dbb956d9f9cb05b719087faed53c88dc80956 Mon Sep 17 00:00:00 2001
From: Chrostoper Ertl <chertl@microsoft.com>
Date: Thu, 28 Nov 2019 16:33:59 +0000
Subject: [PATCH 06/11] fru: Fix buffer overflow vulnerabilities
Partial fix for CVE-2020-5208, see
https://github.com/ipmitool/ipmitool/security/advisories/GHSA-g659-9qxw-p7cp
The `read_fru_area_section` function only performs size validation of
requested read size, and falsely assumes that the IPMI message will not
respond with more than the requested amount of data; it uses the
unvalidated response size to copy into `frubuf`. If the response is
larger than the request, this can result in overflowing the buffer.
The same issue affects the `read_fru_area` function.
---
lib/ipmi_fru.c | 33 +++++++++++++++++++++++++++++++--
1 file changed, 31 insertions(+), 2 deletions(-)
--- a/lib/ipmi_fru.c
+++ b/lib/ipmi_fru.c
@@ -615,7 +615,10 @@ int
read_fru_area(struct ipmi_intf * intf, struct fru_info *fru, uint8_t id,
uint32_t offset, uint32_t length, uint8_t *frubuf)
{
- uint32_t off = offset, tmp, finish;
+ uint32_t off = offset;
+ uint32_t tmp;
+ uint32_t finish;
+ uint32_t size_left_in_buffer;
struct ipmi_rs * rsp;
struct ipmi_rq req;
uint8_t msg_data[4];
@@ -628,10 +631,12 @@ read_fru_area(struct ipmi_intf * intf, s
finish = offset + length;
if (finish > fru->size) {
+ memset(frubuf + fru->size, 0, length - fru->size);
finish = fru->size;
lprintf(LOG_NOTICE, "Read FRU Area length %d too large, "
"Adjusting to %d",
offset + length, finish - offset);
+ length = finish - offset;
}
memset(&req, 0, sizeof(req));
@@ -667,6 +672,7 @@ read_fru_area(struct ipmi_intf * intf, s
}
}
+ size_left_in_buffer = length;
do {
tmp = fru->access ? off >> 1 : off;
msg_data[0] = id;
@@ -707,9 +713,18 @@ read_fru_area(struct ipmi_intf * intf, s
}
tmp = fru->access ? rsp->data[0] << 1 : rsp->data[0];
+ if(rsp->data_len < 1
+ || tmp > rsp->data_len - 1
+ || tmp > size_left_in_buffer)
+ {
+ printf(" Not enough buffer size");
+ return -1;
+ }
+
memcpy(frubuf, rsp->data + 1, tmp);
off += tmp;
frubuf += tmp;
+ size_left_in_buffer -= tmp;
/* sometimes the size returned in the Info command
* is too large. return 0 so higher level function
* still attempts to parse what was returned */
@@ -742,7 +757,9 @@ read_fru_area_section(struct ipmi_intf *
uint32_t offset, uint32_t length, uint8_t *frubuf)
{
static uint32_t fru_data_rqst_size = 20;
- uint32_t off = offset, tmp, finish;
+ uint32_t off = offset;
+ uint32_t tmp, finish;
+ uint32_t size_left_in_buffer;
struct ipmi_rs * rsp;
struct ipmi_rq req;
uint8_t msg_data[4];
@@ -755,10 +772,12 @@ read_fru_area_section(struct ipmi_intf *
finish = offset + length;
if (finish > fru->size) {
+ memset(frubuf + fru->size, 0, length - fru->size);
finish = fru->size;
lprintf(LOG_NOTICE, "Read FRU Area length %d too large, "
"Adjusting to %d",
offset + length, finish - offset);
+ length = finish - offset;
}
memset(&req, 0, sizeof(req));
@@ -773,6 +792,8 @@ read_fru_area_section(struct ipmi_intf *
if (fru->access && fru_data_rqst_size > 16)
#endif
fru_data_rqst_size = 16;
+
+ size_left_in_buffer = length;
do {
tmp = fru->access ? off >> 1 : off;
msg_data[0] = id;
@@ -804,8 +825,16 @@ read_fru_area_section(struct ipmi_intf *
}
tmp = fru->access ? rsp->data[0] << 1 : rsp->data[0];
+ if(rsp->data_len < 1
+ || tmp > rsp->data_len - 1
+ || tmp > size_left_in_buffer)
+ {
+ printf(" Not enough buffer size");
+ return -1;
+ }
memcpy((frubuf + off)-offset, rsp->data + 1, tmp);
off += tmp;
+ size_left_in_buffer -= tmp;
/* sometimes the size returned in the Info command
* is too large. return 0 so higher level function

View file

@ -1,43 +0,0 @@
From 910e5782b7d9f222d4e34d3505d0d636ff757103 Mon Sep 17 00:00:00 2001
From: Chrostoper Ertl <chertl@microsoft.com>
Date: Thu, 28 Nov 2019 16:44:18 +0000
Subject: [PATCH 07/11] fru: Fix buffer overflow in ipmi_spd_print_fru
Partial fix for CVE-2020-5208, see
https://github.com/ipmitool/ipmitool/security/advisories/GHSA-g659-9qxw-p7cp
The `ipmi_spd_print_fru` function has a similar issue as the one fixed
by the previous commit in `read_fru_area_section`. An initial request is
made to get the `fru.size`, which is used as the size for the allocation
of `spd_data`. Inside a loop, further requests are performed to get the
copy sizes which are not checked before being used as the size for a
copy into the buffer.
---
lib/dimm_spd.c | 9 ++++++++-
1 file changed, 8 insertions(+), 1 deletion(-)
--- a/lib/dimm_spd.c
+++ b/lib/dimm_spd.c
@@ -1621,7 +1621,7 @@ ipmi_spd_print_fru(struct ipmi_intf * in
struct ipmi_rq req;
struct fru_info fru;
uint8_t *spd_data, msg_data[4];
- int len, offset;
+ uint32_t len, offset;
msg_data[0] = id;
@@ -1697,6 +1697,13 @@ ipmi_spd_print_fru(struct ipmi_intf * in
}
len = rsp->data[0];
+ if(rsp->data_len < 1
+ || len > rsp->data_len - 1
+ || len > fru.size - offset)
+ {
+ printf(" Not enough buffer size");
+ return -1;
+ }
memcpy(&spd_data[offset], rsp->data + 1, len);
offset += len;
} while (offset < fru.size);

View file

@ -1,43 +0,0 @@
From 4f7778ed232a92bde388f38917b94f458a82c78e Mon Sep 17 00:00:00 2001
From: Chrostoper Ertl <chertl@microsoft.com>
Date: Thu, 28 Nov 2019 16:51:49 +0000
Subject: [PATCH 08/11] session: Fix buffer overflow in ipmi_get_session_info
Partial fix for CVE-2020-5208, see
https://github.com/ipmitool/ipmitool/security/advisories/GHSA-g659-9qxw-p7cp
The `ipmi_get_session_info` function does not properly check the
response `data_len`, which is used as a copy size, allowing stack buffer
overflow.
---
lib/ipmi_session.c | 12 ++++++++----
1 file changed, 8 insertions(+), 4 deletions(-)
--- a/lib/ipmi_session.c
+++ b/lib/ipmi_session.c
@@ -309,8 +309,10 @@ ipmi_get_session_info(struct ipmi_intf
}
else
{
- memcpy(&session_info, rsp->data, rsp->data_len);
- print_session_info(&session_info, rsp->data_len);
+ memcpy(&session_info, rsp->data,
+ __min(rsp->data_len, sizeof(session_info)));
+ print_session_info(&session_info,
+ __min(rsp->data_len, sizeof(session_info)));
}
break;
@@ -341,8 +343,10 @@ ipmi_get_session_info(struct ipmi_intf
break;
}
- memcpy(&session_info, rsp->data, rsp->data_len);
- print_session_info(&session_info, rsp->data_len);
+ memcpy(&session_info, rsp->data,
+ __min(rsp->data_len, sizeof(session_info)));
+ print_session_info(&session_info,
+ __min(rsp->data_len, sizeof(session_info)));
} while (i <= session_info.session_slot_count);
break;

View file

@ -1,32 +0,0 @@
From 743dd4faa302f22950e4438cf684e1e398eb47eb Mon Sep 17 00:00:00 2001
From: Chrostoper Ertl <chertl@microsoft.com>
Date: Thu, 28 Nov 2019 16:56:38 +0000
Subject: [PATCH 09/11] channel: Fix buffer overflow
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Partial fix for CVE-2020-5208, see
https://github.com/ipmitool/ipmitool/security/advisories/GHSA-g659-9qxw-p7cp
The `ipmi_get_channel_cipher_suites` function does not properly check
the final responses `data_len`, which can lead to stack buffer overflow
on the final copy.
---
lib/ipmi_channel.c | 5 ++++-
1 file changed, 4 insertions(+), 1 deletion(-)
--- a/lib/ipmi_channel.c
+++ b/lib/ipmi_channel.c
@@ -413,7 +413,10 @@ ipmi_get_channel_cipher_suites(struct ip
lprintf(LOG_ERR, "Unable to Get Channel Cipher Suites");
return -1;
}
- if (rsp->ccode > 0) {
+ if (rsp->ccode
+ || rsp->data_len < 1
+ || rsp->data_len > sizeof(uint8_t) + 0x10)
+ {
lprintf(LOG_ERR, "Get Channel Cipher Suites failed: %s",
val2str(rsp->ccode, completion_code_vals));
return -1;

View file

@ -1,83 +0,0 @@
From e048e9c65a52f0879d482531e70735c1d314d43a Mon Sep 17 00:00:00 2001
From: Chrostoper Ertl <chertl@microsoft.com>
Date: Thu, 28 Nov 2019 17:06:39 +0000
Subject: [PATCH 10/11] lanp: Fix buffer overflows in get_lan_param_select
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Partial fix for CVE-2020-5208, see
https://github.com/ipmitool/ipmitool/security/advisories/GHSA-g659-9qxw-p7cp
The `get_lan_param_select` function is missing a validation check on the
responses `data_len`, which it then returns to caller functions, where
stack buffer overflow can occur.
---
lib/ipmi_lanp.c | 14 +++++++-------
1 file changed, 7 insertions(+), 7 deletions(-)
--- a/lib/ipmi_lanp.c
+++ b/lib/ipmi_lanp.c
@@ -1809,7 +1809,7 @@ ipmi_lan_alert_set(struct ipmi_intf * in
if (p == NULL) {
return (-1);
}
- memcpy(data, p->data, p->data_len);
+ memcpy(data, p->data, __min(p->data_len, sizeof(data)));
/* set new ipaddr */
memcpy(data+3, temp, 4);
printf("Setting LAN Alert %d IP Address to %d.%d.%d.%d\n", alert,
@@ -1824,7 +1824,7 @@ ipmi_lan_alert_set(struct ipmi_intf * in
if (p == NULL) {
return (-1);
}
- memcpy(data, p->data, p->data_len);
+ memcpy(data, p->data, __min(p->data_len, sizeof(data)));
/* set new macaddr */
memcpy(data+7, temp, 6);
printf("Setting LAN Alert %d MAC Address to "
@@ -1838,7 +1838,7 @@ ipmi_lan_alert_set(struct ipmi_intf * in
if (p == NULL) {
return (-1);
}
- memcpy(data, p->data, p->data_len);
+ memcpy(data, p->data, __min(p->data_len, sizeof(data)));
if (strncasecmp(argv[1], "def", 3) == 0 ||
strncasecmp(argv[1], "default", 7) == 0) {
@@ -1864,7 +1864,7 @@ ipmi_lan_alert_set(struct ipmi_intf * in
if (p == NULL) {
return (-1);
}
- memcpy(data, p->data, p->data_len);
+ memcpy(data, p->data, __min(p->data_len, sizeof(data)));
if (strncasecmp(argv[1], "on", 2) == 0 ||
strncasecmp(argv[1], "yes", 3) == 0) {
@@ -1889,7 +1889,7 @@ ipmi_lan_alert_set(struct ipmi_intf * in
if (p == NULL) {
return (-1);
}
- memcpy(data, p->data, p->data_len);
+ memcpy(data, p->data, __min(p->data_len, sizeof(data)));
if (strncasecmp(argv[1], "pet", 3) == 0) {
printf("Setting LAN Alert %d destination to PET Trap\n", alert);
@@ -1917,7 +1917,7 @@ ipmi_lan_alert_set(struct ipmi_intf * in
if (p == NULL) {
return (-1);
}
- memcpy(data, p->data, p->data_len);
+ memcpy(data, p->data, __min(p->data_len, sizeof(data)));
if (str2uchar(argv[1], &data[2]) != 0) {
lprintf(LOG_ERR, "Invalid time: %s", argv[1]);
@@ -1933,7 +1933,7 @@ ipmi_lan_alert_set(struct ipmi_intf * in
if (p == NULL) {
return (-1);
}
- memcpy(data, p->data, p->data_len);
+ memcpy(data, p->data, __min(p->data_len, sizeof(data)));
if (str2uchar(argv[1], &data[3]) != 0) {
lprintf(LOG_ERR, "Invalid retry: %s", argv[1]);

View file

@ -1,130 +0,0 @@
From 98b47424cf548f58c4d295fa8235210406ea85ca Mon Sep 17 00:00:00 2001
From: Chrostoper Ertl <chertl@microsoft.com>
Date: Thu, 28 Nov 2019 17:13:45 +0000
Subject: [PATCH 11/11] fru, sdr: Fix id_string buffer overflows
Final part of the fixes for CVE-2020-5208, see
https://github.com/ipmitool/ipmitool/security/advisories/GHSA-g659-9qxw-p7cp
9 variants of stack buffer overflow when parsing `id_string` field of
SDR records returned from `CMD_GET_SDR` command.
SDR record structs have an `id_code` field, and an `id_string` `char`
array.
The length of `id_string` is calculated as `(id_code & 0x1f) + 1`,
which can be larger than expected 16 characters (if `id_code = 0xff`,
then length will be `(0xff & 0x1f) + 1 = 32`).
In numerous places, this can cause stack buffer overflow when copying
into fixed buffer of size `17` bytes from this calculated length.
---
lib/ipmi_fru.c | 2 +-
lib/ipmi_sdr.c | 40 ++++++++++++++++++++++++----------------
2 files changed, 25 insertions(+), 17 deletions(-)
--- a/lib/ipmi_fru.c
+++ b/lib/ipmi_fru.c
@@ -3062,7 +3062,7 @@ ipmi_fru_print(struct ipmi_intf * intf,
return 0;
memset(desc, 0, sizeof(desc));
- memcpy(desc, fru->id_string, fru->id_code & 0x01f);
+ memcpy(desc, fru->id_string, __min(fru->id_code & 0x01f, sizeof(desc)));
desc[fru->id_code & 0x01f] = 0;
printf("FRU Device Description : %s (ID %d)\n", desc, fru->device_id);
--- a/lib/ipmi_sdr.c
+++ b/lib/ipmi_sdr.c
@@ -2084,7 +2084,7 @@ ipmi_sdr_print_sensor_eventonly(struct i
return -1;
memset(desc, 0, sizeof (desc));
- snprintf(desc, (sensor->id_code & 0x1f) + 1, "%s", sensor->id_string);
+ snprintf(desc, sizeof(desc), "%.*s", (sensor->id_code & 0x1f) + 1, sensor->id_string);
if (verbose) {
printf("Sensor ID : %s (0x%x)\n",
@@ -2135,7 +2135,7 @@ ipmi_sdr_print_sensor_mc_locator(struct
return -1;
memset(desc, 0, sizeof (desc));
- snprintf(desc, (mc->id_code & 0x1f) + 1, "%s", mc->id_string);
+ snprintf(desc, sizeof(desc), "%.*s", (mc->id_code & 0x1f) + 1, mc->id_string);
if (verbose == 0) {
if (csv_output)
@@ -2228,7 +2228,7 @@ ipmi_sdr_print_sensor_generic_locator(st
char desc[17];
memset(desc, 0, sizeof (desc));
- snprintf(desc, (dev->id_code & 0x1f) + 1, "%s", dev->id_string);
+ snprintf(desc, sizeof(desc), "%.*s", (dev->id_code & 0x1f) + 1, dev->id_string);
if (!verbose) {
if (csv_output)
@@ -2285,7 +2285,7 @@ ipmi_sdr_print_sensor_fru_locator(struct
char desc[17];
memset(desc, 0, sizeof (desc));
- snprintf(desc, (fru->id_code & 0x1f) + 1, "%s", fru->id_string);
+ snprintf(desc, sizeof(desc), "%.*s", (fru->id_code & 0x1f) + 1, fru->id_string);
if (!verbose) {
if (csv_output)
@@ -2489,35 +2489,43 @@ ipmi_sdr_print_name_from_rawentry(struct
int rc =0;
char desc[17];
+ const char *id_string;
+ uint8_t id_code;
memset(desc, ' ', sizeof (desc));
switch ( type) {
case SDR_RECORD_TYPE_FULL_SENSOR:
record.full = (struct sdr_record_full_sensor *) raw;
- snprintf(desc, (record.full->id_code & 0x1f) +1, "%s",
- (const char *)record.full->id_string);
+ id_code = record.full->id_code;
+ id_string = record.full->id_string;
break;
+
case SDR_RECORD_TYPE_COMPACT_SENSOR:
record.compact = (struct sdr_record_compact_sensor *) raw ;
- snprintf(desc, (record.compact->id_code & 0x1f) +1, "%s",
- (const char *)record.compact->id_string);
+ id_code = record.compact->id_code;
+ id_string = record.compact->id_string;
break;
+
case SDR_RECORD_TYPE_EVENTONLY_SENSOR:
record.eventonly = (struct sdr_record_eventonly_sensor *) raw ;
- snprintf(desc, (record.eventonly->id_code & 0x1f) +1, "%s",
- (const char *)record.eventonly->id_string);
- break;
+ id_code = record.eventonly->id_code;
+ id_string = record.eventonly->id_string;
+ break;
+
case SDR_RECORD_TYPE_MC_DEVICE_LOCATOR:
record.mcloc = (struct sdr_record_mc_locator *) raw ;
- snprintf(desc, (record.mcloc->id_code & 0x1f) +1, "%s",
- (const char *)record.mcloc->id_string);
+ id_code = record.mcloc->id_code;
+ id_string = record.mcloc->id_string;
break;
+
default:
rc = -1;
- break;
- }
+ }
+ if (!rc) {
+ snprintf(desc, sizeof(desc), "%.*s", (id_code & 0x1f) + 1, id_string);
+ }
- lprintf(LOG_INFO, "ID: 0x%04x , NAME: %-16s", id, desc);
+ lprintf(LOG_INFO, "ID: 0x%04x , NAME: %-16s", id, desc);
return rc;
}

View file

@ -1,33 +0,0 @@
From c3939dac2c060651361fc71516806f9ab8c38901 Mon Sep 17 00:00:00 2001
From: Vaclav Dolezal <vdolezal@redhat.com>
Date: Thu, 23 Jan 2020 11:26:32 +0100
Subject: [PATCH] hpmfwupg: move variable definition to .c file
Signed-off-by: Vaclav Dolezal <vdolezal@redhat.com>
---
include/ipmitool/ipmi_hpmfwupg.h | 2 +-
lib/ipmi_hpmfwupg.c | 2 ++
2 files changed, 3 insertions(+), 1 deletion(-)
--- a/include/ipmitool/ipmi_hpmfwupg.h
+++ b/include/ipmitool/ipmi_hpmfwupg.h
@@ -800,7 +800,7 @@ typedef struct _VERSIONINFO {
char descString[HPMFWUPG_DESC_STRING_LENGTH + 1];
}VERSIONINFO, *PVERSIONINFO;
-VERSIONINFO gVersionInfo[HPMFWUPG_COMPONENT_ID_MAX];
+extern VERSIONINFO gVersionInfo[HPMFWUPG_COMPONENT_ID_MAX];
#define TARGET_VER (0x01)
#define ROLLBACK_VER (0x02)
--- a/lib/ipmi_hpmfwupg.c
+++ b/lib/ipmi_hpmfwupg.c
@@ -58,6 +58,8 @@ ipmi_intf_get_max_request_data_size(stru
extern int verbose;
+VERSIONINFO gVersionInfo[HPMFWUPG_COMPONENT_ID_MAX];
+
int HpmfwupgUpgrade(struct ipmi_intf *intf, char *imageFilename,
int activate, int, int);
int HpmfwupgValidateImageIntegrity(struct HpmfwupgUpgradeCtx *pFwupgCtx);

View file

@ -8,29 +8,28 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=monit
PKG_VERSION:=5.33.0
PKG_VERSION:=5.14
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://bitbucket.org/tildeslash/monit/downloads/
PKG_HASH:=1ace889c0183473a9d70160df6533bb6e1338dc1354f5928507803e1e2a863b5
PKG_SOURCE_URL:=http://mmonit.com/monit/dist
PKG_MD5SUM:=1b3ae1eb08a0914402a8764e5689c1c5
PKG_MAINTAINER:=Yaroslav Petrov <info@lank.me>
PKG_LICENSE:=AGPL-3.0
PKG_LICENSE_FILES:=COPYING
PKG_CPE_ID:=cpe:/a:tildeslash:monit
PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_NAME)-$(PKG_VERSION)
PKG_INSTALL:=1
PKG_BUILD_PARALLEL:=1
include $(INCLUDE_DIR)/package.mk
define Package/monit/Default
SECTION:=admin
CATEGORY:=Administration
DEPENDS:= +libpthread +zlib
DEPENDS:= +libpthread
TITLE:=System services monitoring utility
URL:=https://mmonit.com/monit/
URL:=http://mmonit.com/monit/
MAINTAINER:=Etienne CHAMPETIER <champetier.etienne@gmail.com>
endef
define Package/monit/Default/description
@ -62,7 +61,6 @@ endef
CONFIGURE_ARGS += \
--without-pam \
ac_cv_ipv6=$(if $(CONFIG_IPV6),yes,no) \
libmonit_cv_setjmp_available=yes \
libmonit_cv_vsnprintf_c99_conformant=yes
@ -77,11 +75,6 @@ ifeq ($(BUILD_VARIANT),nossl)
--without-ssl
endif
define Build/Prepare
$(Build/Prepare/Default)
(cd $(PKG_BUILD_DIR) && ./bootstrap)
endef
define Package/monit/conffiles
/etc/monitrc
endef

View file

@ -1,9 +1,9 @@
--- a/configure.ac
+++ b/configure.ac
@@ -477,14 +477,7 @@ AC_ARG_WITH(ipv6,
--- a/configure
+++ b/configure
@@ -13849,14 +13849,7 @@ fi
# Find the right directory to put the root-mode PID file in
AC_MSG_CHECKING([pid file location])
{ $as_echo "$as_me:${as_lineno-$LINENO}: checking pid file location" >&5
$as_echo_n "checking pid file location... " >&6; }
-if test -d "/run"
-then
- piddir="/run"
@ -14,5 +14,5 @@
-fi
+piddir="/var/run"
AC_DEFINE_UNQUOTED([PIDDIR], "$piddir",
[Define to the pid storage directory.])
cat >>confdefs.h <<_ACEOF

View file

@ -8,15 +8,13 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=muninlite
PKG_VERSION:=2.1.2
PKG_RELEASE:=1
PKG_VERSION:=1.0.4
PKG_RELEASE:=6
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://github.com/munin-monitoring/$(PKG_NAME)/releases/download/$(PKG_VERSION)/
PKG_HASH:=5a49da30944f3b85a0030b661a27e84c06c7f640050802e799304b11cc635ffc
PKG_MAINTAINER:=Jonathan McCrohan <jmccrohan@gmail.com>
PKG_LICENSE:=GPL-2.0-or-later
PKG_SOURCE_URL:=@SF/$(PKG_NAME)
PKG_MD5SUM:=a8cc86f0cc536a6c22dc298f4ed55339
PKG_LICENSE:=GPL-2.0+
PKG_LICENSE_FILES:=LICENSE
include $(INCLUDE_DIR)/package.mk
@ -26,7 +24,8 @@ define Package/muninlite
CATEGORY:=Administration
DEPENDS:=+xinetd
TITLE:=Munin node implemented in shell
URL:=https://github.com/munin-monitoring/muninlite
URL:=http://sourceforge.net/projects/muninlite/
PKG_MAINTAINER:=Jonathan McCrohan <jmccrohan@gmail.com>
endef
define Package/muninlite/Default/description
@ -36,14 +35,20 @@ endef
define Package/muninlite/install
$(INSTALL_DIR) $(1)/usr/sbin/
$(INSTALL_BIN) $(PKG_BUILD_DIR)/muninlite $(1)/usr/sbin/
$(INSTALL_BIN) $(PKG_BUILD_DIR)/munin-node $(1)/usr/sbin/
$(INSTALL_DIR) $(1)/etc/xinetd.d
$(INSTALL_DATA) ./files/etc/xinetd.d/muninlite $(1)/etc/xinetd.d/
$(INSTALL_DIR) $(1)/etc/munin/plugins
$(INSTALL_DATA) ./files/etc/xinetd.d/munin $(1)/etc/xinetd.d/
endef
define Package/muninlite/conffiles
/etc/xinetd.d/muninlite
/etc/xinetd.d/munin
endef
define Build/Configure
endef
define Build/Compile
$(MAKE) -C $(PKG_BUILD_DIR)
endef
$(eval $(call BuildPackage,muninlite))

View file

@ -0,0 +1,10 @@
service munin
{
socket_type = stream
protocol = tcp
wait = no
user = root
group = root
server = /usr/sbin/munin-node
disable = no
}

View file

@ -1,10 +0,0 @@
service munin
{
socket_type = stream
protocol = tcp
wait = no
user = root
group = root
server = /usr/sbin/muninlite
disable = no
}

View file

@ -0,0 +1,12 @@
--- a/Makefile
+++ b/Makefile
@@ -1,7 +1,7 @@
-PLUGINS=df cpu if_ if_err_ load memory processes swap netstat uptime interrupts irqstats ntpdate plugindir_
-#PLUGINS=cpu if_ if_err_ load memory processes netstat uptime interrupts irqstats
+#PLUGINS=df cpu if_ if_err_ load memory processes swap netstat uptime interrupts irqstats ntpdate plugindir_
+PLUGINS=cpu if_ if_err_ load memory processes netstat uptime interrupts irqstats
munin-node: plugins/* munin-node.conf
@VERSION=$$(cat VERSION); \

View file

@ -0,0 +1,11 @@
--- a/munin-node.in
+++ b/munin-node.in
@@ -113,7 +113,7 @@ PLUGINS=$RES
# ===== MAIN LOOP =====
FUNCTIONS="list nodes config fetch version quit"
-HOSTNAME=$(hostname -f 2>/dev/null || hostname)
+HOSTNAME=$(/sbin/uci get "system.@system[0].hostname" 2>/dev/null || cat /proc/sys/kernel/hostname)
echo "# munin node at $HOSTNAME"
while read arg0 arg1
do

View file

@ -0,0 +1,21 @@
--- a/plugins/if_
+++ b/plugins/if_
@@ -15,10 +15,14 @@ config_if() {
echo "up.min 0"
echo "up.negative down"
echo "up.cdef up,8,*"
- if ethtool $1 | grep -q Speed; then
- MAX=$(($(ethtool $1 | grep Speed | sed -e 's/[[:space:]]\{1,\}/ /g' -e 's/^ //' -e 's/M.*//' | cut -d\ -f2) * 1000000))
- echo "up.max $MAX"
- echo "down.max $MAX"
+ if [ -n "$(which ethtool)" ]; then
+ if [ -x "$(which ethtool)" ]; then
+ if ethtool $1 | grep -q Speed; then
+ MAX=$(($(ethtool $1 | grep Speed | sed -e 's/[[:space:]]\{1,\}/ /g' -e 's/^ //' -e 's/M.*//' | cut -d\ -f2) * 1000000))
+ echo "up.max $MAX"
+ echo "down.max $MAX"
+ fi
+ fi
fi
}
fetch_if() {

View file

@ -0,0 +1,12 @@
--- a/plugins/uptime
+++ b/plugins/uptime
@@ -4,8 +4,7 @@ config_uptime() {
echo "graph_vlabel uptime in days"
echo "uptime.label uptime"
echo "uptime.draw AREA"
- echo "uptime.cdef uptime,86400,/"
}
fetch_uptime() {
- echo "uptime.value" $(cut -d\ -f1 /proc/uptime)
+ awk '{printf "uptime.value %.2f",$1/86400; print ""}' /proc/uptime
}

View file

@ -0,0 +1,20 @@
--- a/munin-node.in
+++ b/munin-node.in
@@ -72,7 +72,7 @@ RES=""
for PLUG in $PLUGINS
do
if [ "$PLUG" = "if_" ]; then
- for INTER in $(grep '^ *\(ppp\|eth\|wlan\|ath\|ra\|ipsec\)\([^:]\)\{1,\}:' /proc/net/dev | cut -f1 -d: | sed 's/ //g');
+ for INTER in $(grep '^ *\(ppp\|eth\|wlan\|ath\|ra\|ipsec\|tap\)\([^:]\)\{1,\}:' /proc/net/dev | cut -f1 -d: | sed 's/ //g');
do
INTERRES=$(echo $INTER | sed 's/\./VLAN/')
RES="$RES if_$INTERRES"
@@ -80,7 +80,7 @@ do
eval "config_if_${INTERRES}() { config_if $INTER $@; };"
done
elif [ "$PLUG" = "if_err_" ]; then
- for INTER in $(grep '^ *\(ppp\|eth\|wlan\|ath\|ra\|ipsec\)\([^:]\)\{1,\}:' /proc/net/dev | cut -f1 -d: | sed 's/ //g');
+ for INTER in $(grep '^ *\(ppp\|eth\|wlan\|ath\|ra\|ipsec\|tap\)\([^:]\)\{1,\}:' /proc/net/dev | cut -f1 -d: | sed 's/ //g');
do
INTERRES=$(echo $INTER | sed 's/\./VLAN/')
RES="$RES if_err_$INTERRES"

View file

@ -0,0 +1,24 @@
--- a/munin-node.in
+++ b/munin-node.in
@@ -72,17 +72,17 @@ RES=""
for PLUG in $PLUGINS
do
if [ "$PLUG" = "if_" ]; then
- for INTER in $(grep '^ *\(ppp\|eth\|wlan\|ath\|ra\|ipsec\|tap\)\([^:]\)\{1,\}:' /proc/net/dev | cut -f1 -d: | sed 's/ //g');
+ for INTER in $(grep '^ *\(ppp\|eth\|wlan\|ath\|ra\|ipsec\|tap\|br-\)\([^:]\)\{1,\}:' /proc/net/dev | cut -f1 -d: | sed 's/ //g');
do
- INTERRES=$(echo $INTER | sed 's/\./VLAN/')
+ INTERRES=$(echo $INTER | sed -e 's/\./VLAN/' -e 's/\-/_/')
RES="$RES if_$INTERRES"
eval "fetch_if_${INTERRES}() { fetch_if $INTER $@; };"
eval "config_if_${INTERRES}() { config_if $INTER $@; };"
done
elif [ "$PLUG" = "if_err_" ]; then
- for INTER in $(grep '^ *\(ppp\|eth\|wlan\|ath\|ra\|ipsec\|tap\)\([^:]\)\{1,\}:' /proc/net/dev | cut -f1 -d: | sed 's/ //g');
+ for INTER in $(grep '^ *\(ppp\|eth\|wlan\|ath\|ra\|ipsec\|tap\|br-\)\([^:]\)\{1,\}:' /proc/net/dev | cut -f1 -d: | sed 's/ //g');
do
- INTERRES=$(echo $INTER | sed 's/\./VLAN/')
+ INTERRES=$(echo $INTER | sed -e 's/\./VLAN/' -e 's/\-/_/')
RES="$RES if_err_$INTERRES"
eval "fetch_if_err_${INTERRES}() { fetch_if_err $INTER $@; };"
eval "config_if_err_${INTERRES}() { config_if_err $INTER $@; };"

View file

@ -0,0 +1,22 @@
--- a/plugins/if_
+++ b/plugins/if_
@@ -26,7 +26,7 @@ config_if() {
fi
}
fetch_if() {
- IINFO=$(grep "$1:" /proc/net/dev | cut -d: -f2 | sed -e 's/ / /g')
+ IINFO=$(cat /proc/net/dev | sed -e 's/-/_/g' | grep "$1:" | cut -d: -f2 | sed -e 's/ */ /g' -e 's/^[ \t]*//')
echo "down.value" $(echo $IINFO | cut -d\ -f1)
echo "up.value" $(echo $IINFO | cut -d\ -f9)
}
--- a/plugins/if_err_
+++ b/plugins/if_err_
@@ -15,7 +15,7 @@ config_if_err() {
echo "trans.warning 1"
}
fetch_if_err() {
- IINFO=$(grep "$1:" /proc/net/dev | cut -d: -f2 | sed -e 's/ / /g')
+ IINFO=$(cat /proc/net/dev | sed -e 's/-/_/g' | grep "$1:" | cut -d: -f2 | sed -e 's/ */ /g' -e 's/^[ \t]*//')
echo "rcvd.value" $(echo $IINFO | cut -d\ -f3)
echo "trans.value" $(echo $IINFO | cut -d\ -f11)
}

View file

@ -1,86 +0,0 @@
#
# This is free software, licensed under the GNU General Public License v2.
#
include $(TOPDIR)/rules.mk
PKG_NAME:=netatop
PKG_RELEASE:=1
PKG_VERSION:=3.1
PKG_LICENSE:=GPL-2.0
PKG_SOURCE_URL:=https://www.atoptool.nl/download/
PKG_HASH:=736f43572c31a90748f023f0a5a814bff58d44c0c3f060d776cfd6e6e8435c62
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_MAINTAINER:=Toni Uhlig <matzeton@googlemail.com>
include $(INCLUDE_DIR)/package.mk
include $(INCLUDE_DIR)/kernel.mk
define KernelPackage/netatop
URL:=https://www.atoptool.nl/
CATEGORY:=Kernel modules
SUBMENU:=Netfilter Extensions
TITLE:=netatop netfilter module
FILES:= \
$(PKG_BUILD_DIR)/module/netatop.$(LINUX_KMOD_SUFFIX)
AUTOLOAD:=$(call AutoProbe,netatop)
endef
define KernelPackage/netatop/description
The optional kernel module netatop can be loaded to gather statistics about
the TCP and UDP packets that have been transmitted/received per process and
per thread. As soon as atop discovers that this module is active, it shows
the columns SNET and RNET in the generic screen for the number of transmitted
and received packets per process. When the 'n' key is pressed, it shows
detailed counters about the number packets transmitted/received via TCP and
UDP, the average sizes of these packets, and the total bandwidth consumed
for input and output per process/thread.
endef
define Package/netatop
SECTION:=admin
CATEGORY:=Administration
TITLE:=network counter for atop
DEPENDS:=+zlib +kmod-netatop
URL:=https://www.atoptool.nl/
endef
define Package/netatop/description
The daemon netatopd is packaged with the netatop kernel module. This
daemon takes care that information is gathered about processes that are
finished. For every finished process that has transferred network packets,
a binary record is written to a dedicated logfile. The added records in the
logfile are read by atop with every sample to show information about the
network activity of finished processes as well.
endef
NETATOP_KMOD_MAKEOPTS= \
ARCH="$(LINUX_KARCH)" \
CROSS_COMPILE="$(TARGET_CROSS)" \
KERNDIR="$(LINUX_DIR)"
NETATOP_DAEMON_MAKEOPTS= \
CC="$(TARGET_CC)" \
CFLAGS="$(TARGET_CFLAGS)" \
LDFLAGS="$(TARGET_LDFLAGS)"
define Build/Compile/netatop
$(MAKE) -C $(PKG_BUILD_DIR)/module \
$(NETATOP_KMOD_MAKEOPTS) \
netatop.$(LINUX_KMOD_SUFFIX)
$(MAKE) -C $(PKG_BUILD_DIR)/daemon \
$(NETATOP_DAEMON_MAKEOPTS) \
all
endef
define Build/Compile
$(call Build/Compile/netatop)
endef
define Package/netatop/install
$(INSTALL_DIR) $(1)/usr/sbin/
$(INSTALL_BIN) $(PKG_BUILD_DIR)/daemon/netatopd $(1)/usr/sbin/
endef
$(eval $(call KernelPackage,netatop))
$(eval $(call BuildPackage,netatop))

View file

@ -1,11 +0,0 @@
--- a/daemon/Makefile
+++ b/daemon/Makefile
@@ -6,7 +6,7 @@ THISDIR = $(shell pwd)
all: netatopd
netatopd: netatopd.o Makefile
- $(CC) netatopd.o -o netatopd -lz
+ $(CC) $(LDFLAGS) netatopd.o -o netatopd -lz
clean:
rm -f *.o netatopd

View file

@ -1,11 +0,0 @@
--- a/module/netatop.c
+++ b/module/netatop.c
@@ -1617,7 +1617,7 @@ getsockopt(struct sock *sk, int cmd, void __user *user, int *len)
case NETATOP_GETCNT_TGID:
tasktype = 'g';
- // fall through
+ fallthrough;
case NETATOP_GETCNT_PID:
if (*len < sizeof(pid_t))
return -EINVAL;

View file

@ -1,103 +0,0 @@
#
# Copyright (C) 2008-2016 OpenWrt.org
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#
include $(TOPDIR)/rules.mk
PKG_NAME:=netdata
PKG_VERSION:=1.33.1
PKG_RELEASE:=4
PKG_MAINTAINER:=Josef Schlehofer <pepe.schlehofer@gmail.com>, Daniel Engberg <daniel.engberg.lists@pyret.net>
PKG_LICENSE:=GPL-3.0-or-later
PKG_LICENSE_FILES:=COPYING
PKG_CPE_ID:=cpe:/a:my-netdata:netdata
PKG_SOURCE:=$(PKG_NAME)-v$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://github.com/netdata/netdata/releases/download/v$(PKG_VERSION)
PKG_HASH:=20ba8695d87187787b27128ac3aab9b09aa29ca6b508c48542e0f7d50ec9322b
PKG_BUILD_DIR=$(BUILD_DIR)/$(PKG_NAME)-v$(PKG_VERSION)
PKG_INSTALL:=1
PKG_BUILD_PARALLEL:=1
PKG_FIXUP:=autoreconf
PKG_BUILD_FLAGS:=no-mips16 gc-sections
include $(INCLUDE_DIR)/package.mk
define Package/netdata
SECTION:=admin
CATEGORY:=Administration
DEPENDS:=+zlib +libuuid +libuv +libmnl +libjson-c
TITLE:=Real-time performance monitoring tool
URL:=https://www.netdata.cloud/
endef
define Package/netdata/description
netdata is a highly optimized Linux daemon providing real-time performance
monitoring for Linux systems, applications and SNMP devices over the web.
If you want to use Python plugins install python3, python3-yaml and
python3-urllib3
endef
TARGET_CFLAGS := $(filter-out -O%,$(TARGET_CFLAGS)) -O3
CONFIGURE_ARGS += \
--with-zlib \
--with-math \
--disable-x86-sse \
--enable-lto \
--disable-ebpf \
--without-libcap \
--disable-https \
--disable-dbengine \
--disable-compression \
--disable-plugin-nfacct \
--disable-plugin-freeipmi \
--disable-plugin-cups \
--disable-plugin-xenstat \
--disable-backend-prometheus-remote-write \
--disable-unit-tests \
--disable-ml \
--disable-cloud
define Build/Configure
$(SED) 's/m4_esyscmd(\[git describe .*\])/$(PKG_VERSION)/' $(PKG_BUILD_DIR)/configure.ac
$(Build/Configure/Default)
endef
define Package/netdata/conffiles
/etc/netdata/
endef
define Package/netdata/install
$(INSTALL_DIR) $(1)/etc/netdata/custom-plugins.d
$(CP) $(PKG_INSTALL_DIR)/etc/netdata $(1)/etc
$(CP) ./files/netdata.conf $(1)/etc/netdata
touch $(1)/etc/netdata/.opt-out-from-anonymous-statistics
$(INSTALL_DIR) $(1)/usr/lib
$(CP) $(PKG_INSTALL_DIR)/usr/lib/netdata $(1)/usr/lib
$(CP) $(1)/usr/lib/netdata/conf.d/fping.conf $(1)/etc
$(CP) $(1)/usr/lib/netdata/conf.d/health_alarm_notify.conf $(1)/etc
$(CP) $(1)/usr/lib/netdata/plugins.d/tc-qos-helper.sh $(1)/etc
$(INSTALL_DIR) $(1)/usr/sbin
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/netdata $(1)/usr/sbin
$(INSTALL_DIR) $(1)/usr/share/netdata
$(CP) $(PKG_INSTALL_DIR)/usr/share/netdata $(1)/usr/share
rm $(1)/usr/share/netdata/web/demo*html
rm $(1)/usr/share/netdata/web/fonts/*.svg
rm $(1)/usr/share/netdata/web/fonts/*.ttf
rm $(1)/usr/share/netdata/web/fonts/*.woff
rm $(1)/usr/share/netdata/web/images/*.png
rm $(1)/usr/share/netdata/web/images/*.gif
rm $(1)/usr/share/netdata/web/images/*.ico
rm -rf $(1)/usr/share/netdata/web/old
$(INSTALL_DIR) $(1)/etc/init.d
$(INSTALL_BIN) ./files/netdata.init $(1)/etc/init.d/netdata
endef
$(eval $(call BuildPackage,netdata))

View file

@ -1,32 +0,0 @@
# Full configuration can be retrieved from the running
# server at http://localhost:19999/netdata.conf
#
# Example:
# curl -o /etc/netdata/netdata.conf http://localhost:19999/netdata.conf
#
[global]
update every = 2
memory deduplication (ksm) = no
debug log = syslog
error log = syslog
access log = none
run as user = root
[web]
allow connections from = localhost 10.* 192.168.* 172.16.* 172.17.* 172.18.* 172.19.* 172.20.* 172.21.* 172.22.* 172.23.* 172.24.* 172.25.* 172.26.* 172.27.* 172.28.* 172.29.* 172.30.* 172.31.*
allow dashboard from = localhost 10.* 192.168.* 172.16.* 172.17.* 172.18.* 172.19.* 172.20.* 172.21.* 172.22.* 172.23.* 172.24.* 172.25.* 172.26.* 172.27.* 172.28.* 172.29.* 172.30.* 172.31.*
[plugins]
cgroups = no
apps = no
charts.d = no
fping = no
node.d = no
python.d = no
[health]
enabled = no
[plugin:proc:ipc]
shared memory totals = no

View file

@ -1,21 +0,0 @@
#!/bin/sh /etc/rc.common
START=99
USE_PROCD=1
APPBINARY=/usr/sbin/netdata
CONFIGFILE=/etc/netdata/netdata.conf
start_service() {
mkdir -m 0755 -p /var/cache/netdata
chown nobody /var/cache/netdata
mkdir -m 0755 -p /var/lib/netdata
chown nobody /var/lib/netdata
mkdir -m 0755 -p /var/log/netdata
chown nobody /var/log/netdata
procd_open_instance
procd_set_param command $APPBINARY -D -c $CONFIGFILE
procd_set_param file $CONFIGFILE
procd_set_param respawn
procd_close_instance
}

View file

@ -1,22 +0,0 @@
--- a/collectors/charts.d.plugin/charts.d.conf
+++ b/collectors/charts.d.plugin/charts.d.conf
@@ -30,7 +30,7 @@
# the default enable/disable for all charts.d collectors
# the default is "yes"
-# enable_all_charts="yes"
+enable_all_charts="no"
# BY DEFAULT ENABLED MODULES
# ap=yes
--- a/collectors/python.d.plugin/python.d.conf
+++ b/collectors/python.d.plugin/python.d.conf
@@ -7,7 +7,7 @@
#
# Enable / disable the whole python.d.plugin (all its modules)
-enabled: yes
+enabled: no
# ----------------------------------------------------------------------
# Enable / Disable python.d.plugin modules

View file

@ -1,15 +0,0 @@
--- a/web/gui/main.js
+++ b/web/gui/main.js
@@ -759,11 +759,7 @@ function renderMyNetdataMenu(machinesArr
if (!isSignedIn()) {
if (!NETDATA.registry.isRegistryEnabled()) {
html += (
- `<div class="info-item" style="white-space: nowrap">
- <span>Please <a href="#" onclick="signInDidClick(event); return false">sign in to netdata.cloud</a> to view your nodes!</span>
- <div></div>
- </div>
- <hr />`
+ ``
);
}
}

View file

@ -1,112 +0,0 @@
--- a/collectors/python.d.plugin/Makefile.am
+++ b/collectors/python.d.plugin/Makefile.am
@@ -147,109 +147,3 @@ dist_third_party_DATA = \
python_modules/third_party/monotonic.py \
python_modules/third_party/filelock.py \
$(NULL)
-
-pythonyaml2dir=$(pythonmodulesdir)/pyyaml2
-dist_pythonyaml2_DATA = \
- python_modules/pyyaml2/__init__.py \
- python_modules/pyyaml2/composer.py \
- python_modules/pyyaml2/constructor.py \
- python_modules/pyyaml2/cyaml.py \
- python_modules/pyyaml2/dumper.py \
- python_modules/pyyaml2/emitter.py \
- python_modules/pyyaml2/error.py \
- python_modules/pyyaml2/events.py \
- python_modules/pyyaml2/loader.py \
- python_modules/pyyaml2/nodes.py \
- python_modules/pyyaml2/parser.py \
- python_modules/pyyaml2/reader.py \
- python_modules/pyyaml2/representer.py \
- python_modules/pyyaml2/resolver.py \
- python_modules/pyyaml2/scanner.py \
- python_modules/pyyaml2/serializer.py \
- python_modules/pyyaml2/tokens.py \
- $(NULL)
-
-pythonyaml3dir=$(pythonmodulesdir)/pyyaml3
-dist_pythonyaml3_DATA = \
- python_modules/pyyaml3/__init__.py \
- python_modules/pyyaml3/composer.py \
- python_modules/pyyaml3/constructor.py \
- python_modules/pyyaml3/cyaml.py \
- python_modules/pyyaml3/dumper.py \
- python_modules/pyyaml3/emitter.py \
- python_modules/pyyaml3/error.py \
- python_modules/pyyaml3/events.py \
- python_modules/pyyaml3/loader.py \
- python_modules/pyyaml3/nodes.py \
- python_modules/pyyaml3/parser.py \
- python_modules/pyyaml3/reader.py \
- python_modules/pyyaml3/representer.py \
- python_modules/pyyaml3/resolver.py \
- python_modules/pyyaml3/scanner.py \
- python_modules/pyyaml3/serializer.py \
- python_modules/pyyaml3/tokens.py \
- $(NULL)
-
-python_urllib3dir=$(pythonmodulesdir)/urllib3
-dist_python_urllib3_DATA = \
- python_modules/urllib3/__init__.py \
- python_modules/urllib3/_collections.py \
- python_modules/urllib3/connection.py \
- python_modules/urllib3/connectionpool.py \
- python_modules/urllib3/exceptions.py \
- python_modules/urllib3/fields.py \
- python_modules/urllib3/filepost.py \
- python_modules/urllib3/response.py \
- python_modules/urllib3/poolmanager.py \
- python_modules/urllib3/request.py \
- $(NULL)
-
-python_urllib3_utildir=$(python_urllib3dir)/util
-dist_python_urllib3_util_DATA = \
- python_modules/urllib3/util/__init__.py \
- python_modules/urllib3/util/connection.py \
- python_modules/urllib3/util/request.py \
- python_modules/urllib3/util/response.py \
- python_modules/urllib3/util/retry.py \
- python_modules/urllib3/util/selectors.py \
- python_modules/urllib3/util/ssl_.py \
- python_modules/urllib3/util/timeout.py \
- python_modules/urllib3/util/url.py \
- python_modules/urllib3/util/wait.py \
- $(NULL)
-
-python_urllib3_packagesdir=$(python_urllib3dir)/packages
-dist_python_urllib3_packages_DATA = \
- python_modules/urllib3/packages/__init__.py \
- python_modules/urllib3/packages/ordered_dict.py \
- python_modules/urllib3/packages/six.py \
- $(NULL)
-
-python_urllib3_backportsdir=$(python_urllib3_packagesdir)/backports
-dist_python_urllib3_backports_DATA = \
- python_modules/urllib3/packages/backports/__init__.py \
- python_modules/urllib3/packages/backports/makefile.py \
- $(NULL)
-
-python_urllib3_ssl_match_hostnamedir=$(python_urllib3_packagesdir)/ssl_match_hostname
-dist_python_urllib3_ssl_match_hostname_DATA = \
- python_modules/urllib3/packages/ssl_match_hostname/__init__.py \
- python_modules/urllib3/packages/ssl_match_hostname/_implementation.py \
- $(NULL)
-
-python_urllib3_contribdir=$(python_urllib3dir)/contrib
-dist_python_urllib3_contrib_DATA = \
- python_modules/urllib3/contrib/__init__.py \
- python_modules/urllib3/contrib/appengine.py \
- python_modules/urllib3/contrib/ntlmpool.py \
- python_modules/urllib3/contrib/pyopenssl.py \
- python_modules/urllib3/contrib/securetransport.py \
- python_modules/urllib3/contrib/socks.py \
- $(NULL)
-
-python_urllib3_securetransportdir=$(python_urllib3_contribdir)/_securetransport
-dist_python_urllib3_securetransport_DATA = \
- python_modules/urllib3/contrib/_securetransport/__init__.py \
- python_modules/urllib3/contrib/_securetransport/bindings.py \
- python_modules/urllib3/contrib/_securetransport/low_level.py \
- $(NULL)

View file

@ -1,14 +0,0 @@
--- a/collectors/python.d.plugin/python_modules/bases/loaders.py
+++ b/collectors/python.d.plugin/python_modules/bases/loaders.py
@@ -10,9 +10,9 @@ PY_VERSION = version_info[:2]
try:
if PY_VERSION > (3, 1):
- from pyyaml3 import SafeLoader as YamlSafeLoader
+ from yaml import SafeLoader as YamlSafeLoader
else:
- from pyyaml2 import SafeLoader as YamlSafeLoader
+ from yaml import SafeLoader as YamlSafeLoader
except ImportError:
from yaml import SafeLoader as YamlSafeLoader

File diff suppressed because one or more lines are too long

View file

@ -1,3 +0,0 @@
#!/bin/sh
netdata -version 2>&1 | grep "$2"

View file

@ -1,40 +0,0 @@
# SPDX-Identifier-License: GPL-2.0-only
include $(TOPDIR)/rules.mk
PKG_NAME:=nload
PKG_VERSION:=0.7.4
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://codeload.github.com/rolandriegel/nload/tar.gz/v$(PKG_VERSION)?
PKG_HASH:=a73b3a75356776860fc4c40daebce04c5022f73d39704a12fb0aeb88a751216a
PKG_MAINTAINER:=Jacky Guo <leickwell@hotmail.com>
PKG_LICENSE:=GPL-2.0-only
PKG_LICENSE_FILES:=COPYING
PKG_FIXUP:=autoreconf
PKG_BUILD_PARALLEL:=1
PKG_INSTALL:=1
include $(INCLUDE_DIR)/package.mk
define Package/nload
SECTION:=admin
CATEGORY:=Administration
TITLE:=A network traffic monitor
DEPENDS:=+libncurses +libstdcpp
URL:=https://github.com/rolandriegel/nload
endef
define Package/nload/description
Monitors network traffic and bandwidth usage.
endef
define Package/nload/install
$(INSTALL_DIR) $(1)/usr/bin
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/nload $(1)/usr/bin/
endef
$(eval $(call BuildPackage,nload))

View file

@ -1,3 +0,0 @@
#!/bin/sh
nload -h | grep "$PKG_VERSION"

View file

@ -1,34 +0,0 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=nyx
PKG_VERSION:=2.1.0
PKG_RELEASE:=3
PYPI_NAME:=nyx
PKG_HASH:=88521488d1c9052e457b9e66498a4acfaaa3adf3adc5a199892632f129a5390b
PKG_MAINTAINER:=Javier Marcet <javier@marcet.info>
PKG_LICENSE:=GPL-3.0-only
PKG_LICENSE_FILES:=LICENSE
include ../../lang/python/pypi.mk
include $(INCLUDE_DIR)/package.mk
include ../../lang/python/python3-package.mk
define Package/nyx
SECTION:=admin
CATEGORY:=Administration
URL:=https://nyx.torproject.org/
TITLE:=Terminal status monitor for Tor
DEPENDS:=+python3 +python3-stem
endef
define Package/nyx/description
Nyx is a command-line monitor for Tor. With this you can get detailed real-time
information about your relay such as bandwidth usage, connections, logs, and
much more.
endef
$(eval $(call Py3Package,nyx))
$(eval $(call BuildPackage,nyx))
$(eval $(call BuildPackage,nyx-src))

View file

@ -1,32 +0,0 @@
From dcaddf2ab7f9d2ef8649f98bb6870995ebe0b893 Mon Sep 17 00:00:00 2001
From: Juan Orti Alcaine <jortialc@redhat.com>
Date: Mon, 27 Jun 2022 19:38:34 +0200
Subject: [PATCH] Replace inspect.getargspec usage to support python 3.11
---
nyx/panel/__init__.py | 2 +-
test/__init__.py | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
--- a/nyx/panel/__init__.py
+++ b/nyx/panel/__init__.py
@@ -78,7 +78,7 @@ class KeyHandler(collections.namedtuple(
is_match = self._key_func(key) if self._key_func else key.match(self.key)
if is_match:
- if inspect.getargspec(self._action).args == ['key']:
+ if inspect.getfullargspec(self._action).args == ['key']:
self._action(key)
else:
self._action()
--- a/test/__init__.py
+++ b/test/__init__.py
@@ -94,7 +94,7 @@ def render(func, *args, **kwargs):
nyx.curses.CURSES_SCREEN.erase()
start_time = time.time()
- func_args = inspect.getargspec(func).args
+ func_args = inspect.getfullargspec(func).args
if func_args[:1] == ['subwindow'] or func_args[:2] == ['self', 'subwindow']:
def _draw(subwindow):

View file

@ -1,100 +0,0 @@
# SPDX-Identifier-License: GPL-3.0-only
#
# openwisp.org
include $(TOPDIR)/rules.mk
PKG_NAME:=openwisp-config
PKG_RELEASE:=2
PKG_MAINTAINER:=Federico Capoano <f.capoano@openwisp.io>
PKG_LICENSE:=GPL-3.0-or-later
PKG_SOURCE_URL:=https://github.com/openwisp/openwisp-config.git
PKG_MIRROR_HASH:=7daa10a9d170e665f33a5555a246b4da2223c2d8d0e8a047edb01701c8886986
PKG_SOURCE_PROTO:=git
PKG_SOURCE_VERSION:=1.0.1
include $(INCLUDE_DIR)/package.mk
define Package/openwisp-config
TITLE:=Remote configuration management agent
CATEGORY:=Administration
SECTION:=admin
SUBMENU:=openwisp
DEPENDS:=+curl \
+lua \
+libuci-lua \
+luafilesystem \
+luci-lib-nixio \
+ca-certificates
PKGARCH:=all
URL:=https://openwisp.org
endef
define Build/Compile
endef
define Package/openwisp-config/conffiles
/etc/config/openwisp
endef
define Package/openwisp-config/install
$(INSTALL_DIR) \
$(1)/usr/sbin \
$(1)/etc/init.d \
$(1)/etc/config \
$(1)/etc/openwisp \
$(1)/usr/lib/lua/openwisp
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-config/files/openwisp.agent \
$(1)/usr/sbin/openwisp_config
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-config/files/openwisp.init \
$(1)/etc/init.d/openwisp_config
$(INSTALL_CONF) $(PKG_BUILD_DIR)/openwisp-config/files/openwisp.config \
$(1)/etc/config/openwisp
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-config/files/sbin/openwisp-reload-config \
$(1)/usr/sbin/openwisp-reload-config
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-config/files/lib/openwisp/utils.lua \
$(1)/usr/lib/lua/openwisp/utils.lua
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-config/files/lib/openwisp/net.lua \
$(1)/usr/lib/lua/openwisp/net.lua
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-config/files/sbin/openwisp-store-unmanaged.lua \
$(1)/usr/sbin/openwisp-store-unmanaged
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-config/files/sbin/openwisp-restore-unmanaged.lua \
$(1)/usr/sbin/openwisp-restore-unmanaged
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-config/files/sbin/openwisp-remove-default-wifi.lua \
$(1)/usr/sbin/openwisp-remove-default-wifi
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-config/files/sbin/openwisp-uci-autoname.lua \
$(1)/usr/sbin/openwisp-uci-autoname
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-config/files/sbin/openwisp-update-config.lua \
$(1)/usr/sbin/openwisp-update-config
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-config/files/sbin/openwisp-get-address.lua \
$(1)/usr/sbin/openwisp-get-address
$(CP) $(PKG_BUILD_DIR)/VERSION $(1)/etc/openwisp/
endef
$(eval $(call BuildPackage,openwisp-config))

View file

@ -1,116 +0,0 @@
# SPDX-Identifier-License: GPL-3.0-only
#
# openwisp.org
include $(TOPDIR)/rules.mk
PKG_NAME:=openwisp-monitoring
PKG_RELEASE:=2
PKG_MAINTAINER:=Federico Capoano <support@openwisp.io>
PKG_LICENSE:=GPL-3.0-or-later
PKG_LICENSE_FILES:=LICENSE
PKG_SOURCE_URL:=https://github.com/openwisp/openwrt-openwisp-monitoring.git
PKG_MIRROR_HASH:=ce2ed94d24f68c58320ca700a088471368e1097754be23ad6053842cf0aaa97e
PKG_SOURCE_PROTO:=git
PKG_SOURCE_VERSION:=0.1.1
PKGARCH:=all
include $(INCLUDE_DIR)/package.mk
define Package/openwisp-monitoring
TITLE:=OpenWISP Monitoring agent
CATEGORY:=Administration
SECTION:=admin
SUBMENU:=openwisp
DEPENDS:=+netjson-monitoring +openwisp-config
URL:=http://openwisp.org
endef
define Package/netjson-monitoring
TITLE:=NetJson Monitoring
CATEGORY:=Administration
SECTION:=admin
SUBMENU:=openwisp
DEPENDS:=+libubus-lua +lua-cjson +rpcd +rpcd-mod-iwinfo
URL:=http://openwisp.org
endef
define Build/Compile
endef
define Package/openwisp-monitoring/conffiles
/etc/config/openwisp-monitoring
endef
define Package/netjson-monitoring/install
$(INSTALL_DIR) \
$(1)/usr/sbin \
$(1)/usr/libexec \
$(1)/usr/lib/lua/openwisp-monitoring \
$(1)/etc/openwisp-monitoring
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/sbin/netjson-monitoring.lua \
$(1)/usr/libexec/netjson-monitoring
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/netjson-monitoring \
$(1)/usr/sbin/netjson-monitoring
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/dhcp.lua \
$(1)/usr/lib/lua/openwisp-monitoring/dhcp.lua
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/interfaces.lua \
$(1)/usr/lib/lua/openwisp-monitoring/interfaces.lua
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/monitoring.lua \
$(1)/usr/lib/lua/openwisp-monitoring/monitoring.lua
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/utils.lua \
$(1)/usr/lib/lua/openwisp-monitoring/utils.lua
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/neighbors.lua \
$(1)/usr/lib/lua/openwisp-monitoring/neighbors.lua
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/resources.lua \
$(1)/usr/lib/lua/openwisp-monitoring/resources.lua
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/wifi.lua \
$(1)/usr/lib/lua/openwisp-monitoring/wifi.lua
$(CP) $(PKG_BUILD_DIR)/VERSION $(1)/etc/openwisp-monitoring/
endef
define Package/openwisp-monitoring/install
$(INSTALL_DIR) \
$(1)/usr/sbin \
$(1)/etc/init.d \
$(1)/etc/config \
$(1)/etc/openwisp-monitoring
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/monitoring.agent \
$(1)/usr/sbin/openwisp-monitoring
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/monitoring.init \
$(1)/etc/init.d/openwisp-monitoring
$(INSTALL_CONF) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/monitoring.config \
$(1)/etc/config/openwisp-monitoring
endef
$(eval $(call BuildPackage,openwisp-monitoring))
$(eval $(call BuildPackage,netjson-monitoring))

View file

@ -1,62 +0,0 @@
if PACKAGE_rsyslog
config RSYSLOG_gssapi_krb5
bool "Enable GSSAPI Kerberos 5 support"
default n
help
Enable GSSAPI Kerberos 5 support in rsyslog
config RSYSLOG_mysql
bool "Enable MySQL support"
default n
help
Enable MySQL support in rsyslog
config RSYSLOG_pgsql
bool "Enable PostgreSQL support"
default n
help
Enable PostgreSQL support in rsyslog
config RSYSLOG_libdbi
bool "Enable libdbi support"
default n
help
Enable libdbi support in rsyslog
config RSYSLOG_elasticsearch
bool "Enable ElasticSearch module support"
default n
help
Enable ElasticSearch output module in rsyslog
config RSYSLOG_omhttp
bool "Enable HTTP output module support"
default n
help
Enable HTTP output module in rsyslog
config RSYSLOG_openssl
bool "Enable OpenSSL support"
default n
help
Enable OpenSSL support in rsyslog
config RSYSLOG_gnutls
bool "Enable GnuTLS support"
default n
help
Enable GnuTLS support in rsyslog
config RSYSLOG_mail
bool "Enable Mail support"
default n
help
Enable mail support in rsyslog
config RSYSLOG_mmjsonparse
bool "Enable JSON parsing module support"
default n
help
Enable JSON parsing support in rsyslog
config RSYSLOG_mmdblookup
bool "Enable MaxMind DB lookup helper support"
default n
help
Enable MaxMind DB lookup helper support in rsyslog
config RSYSLOG_imfile
bool "Enable file input module support"
default n
help
Enable input file module in rsyslog
endif

View file

@ -1,83 +0,0 @@
#
# Copyright (C) 2006-2014 OpenWrt.org
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#
include $(TOPDIR)/rules.mk
PKG_NAME:=rsyslog
PKG_VERSION:=8.2110.0
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:= \
https://fossies.org/linux/misc \
https://www.rsyslog.com/files/download/rsyslog
PKG_HASH:=3f904ec137ca6412e8273f7896d962ecb589f7d0c589bdf16b1709ec27e24f31
PKG_MAINTAINER:=
PKG_LICENSE:=GPL-3.0-or-later
PKG_LICENSE_FILES:=COPYING
PKG_CPE_ID:=cpe:/a:rsyslog:rsyslog
PKG_INSTALL:=1
PKG_BUILD_PARALLEL:=1
include $(INCLUDE_DIR)/package.mk
define Package/rsyslog
SECTION:=admin
CATEGORY:=Administration
TITLE:=Enhanced system logging and kernel message trapping daemons
URL:=https://www.rsyslog.com/
DEPENDS:= \
+RSYSLOG_gssapi_krb5:krb5-libs +RSYSLOG_elasticsearch:libcurl \
+RSYSLOG_libdbi:libdbi +libestr +libfastjson +RSYSLOG_gnutls:libgnutls \
+RSYSLOG_mmdblookup:libmaxminddb +RSYSLOG_mysql:libmysqlclient \
+RSYSLOG_omhttp:libcurl +RSYSLOG_openssl:libopenssl \
+RSYSLOG_pgsql:libpq +libuuid +zlib
MENU:=1
endef
define Package/rsyslog/conffiles
/etc/rsyslog.conf
endef
CONFIGURE_ARGS+= \
--disable-libgcrypt \
--disable-fmhttp \
--disable-default-tests \
--disable-libsystemd \
$(if $(CONFIG_RSYSLOG_gssapi_krb5),--enable-gssapi-krb5) \
$(if $(CONFIG_RSYSLOG_mysql),--enable-mysql) \
$(if $(CONFIG_RSYSLOG_pgsql),--enable-pgsql) \
$(if $(CONFIG_RSYSLOG_libdbi),--enable-libdbi) \
$(if $(CONFIG_RSYSLOG_elasticsearch),--enable-elasticsearch) \
$(if $(CONFIG_RSYSLOG_omhttp),--enable-omhttp) \
$(if $(CONFIG_RSYSLOG_openssl),--enable-openssl) \
$(if $(CONFIG_RSYSLOG_gnutls),--enable-gnutls) \
$(if $(CONFIG_RSYSLOG_mail),--enable-mail) \
$(if $(CONFIG_RSYSLOG_mmjsonparse),--enable-mmjsonparse) \
$(if $(CONFIG_RSYSLOG_mmdblookup),--enable-mmdblookup) \
$(if $(CONFIG_RSYSLOG_imfile),--enable-imfile)
define Package/rsyslog/install
$(INSTALL_DIR) $(1)/usr/sbin
$(CP) $(PKG_INSTALL_DIR)/usr/sbin/rsyslogd $(1)/usr/sbin/
$(INSTALL_DIR) $(1)/usr/lib/rsyslog
$(CP) $(PKG_INSTALL_DIR)/usr/lib/rsyslog/* $(1)/usr/lib/rsyslog/
$(INSTALL_DIR) $(1)/etc
$(INSTALL_CONF) ./files/rsyslog.conf $(1)/etc
$(INSTALL_DIR) $(1)/etc/init.d
$(INSTALL_BIN) ./files/rsyslog.init $(1)/etc/init.d/rsyslog
$(INSTALL_DIR) $(1)/etc/uci-defaults
$(INSTALL_CONF) ./files/20_rsyslog $(1)/etc/uci-defaults
endef
define Package/rsyslog/config
source "$(SOURCE)/Config.in"
endef
$(eval $(call BuildPackage,rsyslog))

View file

@ -1,35 +0,0 @@
#!/bin/sh
grep -qv -e '^\s*#' -e '^\s*$' /etc/rsyslog.conf 2>/dev/null && exit 0
[ "$(uci -q get rsyslog.syslog)" == "syslog" ] && exit 0
uci -q import rsyslog << EOI
config syslog 'syslog'
option tcp_input_port '514'
option udp_input '1'
option tcp_input '0'
option udp_input_port '514'
option default_template 'RSYSLOG_TraditionalFileFormat'
list modules 'imuxsock'
list modules 'imklog'
config selector
option source '*.info;mail.none;authpriv.none;cron.none'
option destination '/var/log/messages'
config selector
option source 'authpriv.*'
option destination '/var/log/secure'
config selector
option source 'mail.*'
option destination '/var/log/maillog'
config selector
option source 'cron.*'
option destination '/var/log/cron'
config selector
option source 'local7.*'
option destination '/var/log/boot.log'
EOI

View file

@ -1,18 +0,0 @@
#
# The preferred way to configure rsyslogd is now UCI.
#
# This file can be still used and will be included
# on top of the final configuration inside /var/etc/rsyslog.conf
#
# Example of default configuration:
#
# module(load="imuxsock")
# module(load="imklog")
# module(load="imudp")
# input(type="imudp" port="514")
# $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
# *.info;mail.none;authpriv.none;cron.none /var/log/messages
# authpriv.* /var/log/secure
# mail.* /var/log/maillog
# cron.* /var/log/cron
# local7.* /var/log/boot.log

View file

@ -1,114 +0,0 @@
#!/bin/sh /etc/rc.common
# Copyright (C) 2014 OpenWrt.org
# shellcheck disable=SC3043
# shellcheck disable=SC2034
# shellcheck disable=SC3037
# shellcheck disable=SC2154
# shellcheck disable=SC2129
START=20
USE_PROCD=1
UCI_CONF="rsyslog"
CONFIG_FILE="/var/etc/rsyslog.conf"
BASE_CONFIG_FILE="/etc/rsyslog.conf"
modules=""
selectors=""
forwarders=""
handle_selector() {
local config="$1"
local src
local dst
config_get src "${config}" source
config_get dst "${config}" destination
if [ "${src}" != "" ] && [ "$dst" != "" ]; then
selectors="${selectors}\n${src}\t${dst}\n"
fi
}
handle_forwarder() {
local config="$1"
local src
local target
local protocol
local port
local rfc
local opts
config_get src "${config}" source
config_get target "${config}" target
config_get protocol "${config}" protocol "udp"
config_get port "${config}" port "514"
config_get rfc "${config}" rfc "3164"
if [ "$rfc" = "5424" ]; then
opts='Template="RSYSLOG_SyslogProtocol23Format" TCP_Framing="octet-counted"'
fi
if [ "${src}" != "" ] && [ "${target}" != "" ]; then
action="action(type=\"omfwd\" target=\"$target\" port=\"$port\" protocol=\"$protocol\" $opts action.resumeRetryCount=\"100\" queue.type=\"linkedList\" queue.size=\"10000\")"
forwarders="${forwarders}\n${src}\t${action}\n"
fi
}
expand_config() {
local input_t=""
local input_u=""
config_load "${UCI_CONF}"
config_list_foreach syslog modules handle_module
config_get_bool tcp_input syslog tcp_input
if [ "${tcp_input}" -eq 1 ]; then
modules="${modules} imtcp"
config_get tcp_port syslog tcp_input_port
input_t="input(type=\"imtcp\" port=\"${tcp_port}\")"
fi
config_get_bool udp_input syslog udp_input
if [ "${udp_input}" -eq 1 ]; then
modules="${modules} imudp"
config_get udp_port syslog udp_input_port
input_u="input(type=\"imudp\" port=\"${udp_port}\")"
fi
config_get template syslog default_template
config_foreach handle_selector selector
config_foreach handle_forwarder forwarder
mkdir -p "$(dirname ${CONFIG_FILE})"
# shellcheck disable=SC2188
> ${CONFIG_FILE}
echo "include(file=\"${BASE_CONFIG_FILE}\" mode=\"optional\")" >> ${CONFIG_FILE}
for m in ${modules}; do
echo "module(load=\"${m}\")" >> ${CONFIG_FILE}
done
echo "${input_t}" >> ${CONFIG_FILE}
echo "${input_u}" >> ${CONFIG_FILE}
echo "\$ActionFileDefaultTemplate ${template}" >> ${CONFIG_FILE}
echo -e "${selectors}" >> ${CONFIG_FILE}
echo -e "${forwarders}" >> ${CONFIG_FILE}
}
handle_module() {
local module="$1"
modules="${modules} $module"
}
start_service() {
expand_config
procd_open_instance
procd_set_param command /usr/sbin/rsyslogd -f ${CONFIG_FILE} -n
procd_close_instance
}
service_triggers()
{
procd_add_reload_trigger ${UCI_CONF}
}

View file

@ -1,23 +0,0 @@
menu "Configuration"
config SCHROOT_BTRFS
bool "Enable support for btrfs snapshots"
select PACKAGE_btrfs-progs
default n
config SCHROOT_LOOPBACK
bool "Enable support for loopback mounts"
select PACKAGE_losetup
default n
config SCHROOT_LVM
bool "Enable support for LVM snapshots"
select PACKAGE_lvm2
default n
config SCHROOT_UUID
bool "Enable support for UUIDs"
select PACKAGE_libuuid
default n
endmenu

View file

@ -1,87 +0,0 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=reschroot
PKG_VERSION:=1.6.13
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://codeberg.org/shelter/reschroot/archive/release
PKG_HASH:=c05d6a1bb0210d401e6522eee2c465e0b43c6c98f7101d671f9e9ef88b3accf5
PKG_MAINTAINER:=Javier Marcet <javier@marcet.info>
PKG_LICENSE:=GPL-3.0-only
PKG_LICENSE_FILES:=COPYING
CMAKE_INSTALL:=1
CMAKE_BINARY_SUBDIR:=build
PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-$(PKG_VERSION)/$(PKG_NAME)
include $(INCLUDE_DIR)/package.mk
include $(INCLUDE_DIR)/cmake.mk
include $(INCLUDE_DIR)/nls.mk
define Package/schroot
SECTION:=admin
CATEGORY:=Administration
TITLE:=Securely enter a chroot and run a command or login shell.
DEPENDS:=$(ICONV_DEPENDS) \
+boost +boost-filesystem +boost-iostreams +boost-program_options +boost-regex \
+SCHROOT_BTRFS:btrfs-progs \
+SCHROOT_LOOPBACK:losetup \
+SCHROOT_LVM:lvm2 \
+SCHROOT_UUID:libuuid \
$(INTL_DEPENDS)
URL:=https://codeberg.org/shelter/reschroot
endef
define Package/schroot/description
Securely enter a chroot and run a command or login shell.
endef
define Package/schroot/conffiles
/etc/schroot/
endef
define Package/schroot/config
source "$(SOURCE)/Config.in"
endef
PKG_CONFIG_DEPENDS := \
CONFIG_SCHROOT_BTRFS \
CONFIG_SCHROOT_LOOPBACK \
CONFIG_SCHROOT_LVM \
CONFIG_SCHROOT_UUID
CMAKE_OPTIONS += \
-Dbtrfs-snapshot=$(if $(CONFIG_SCHROOT_BTRFS),ON,OFF) \
-Dloopback=$(if $(CONFIG_SCHROOT_LOOPBACK),ON,OFF) \
-Dlvm-snapshot=$(if $(CONFIG_SCHROOT_LVM),ON,OFF) \
-Duuid=$(if $(CONFIG_SCHROOT_UUID),ON,OFF) \
-Dblock-device=ON \
-Dunion=ON \
-Ddhcroot=OFF \
-Ddchroot-dsa=OFF \
-Ddebug=OFF \
-Ddoxygen=OFF \
-Dpam=OFF \
-Dtest=OFF \
-Duuid=OFF \
-Dzfs-snapshot=OFF
define Package/schroot/install
$(INSTALL_DIR) $(1)/usr/bin
$(INSTALL_SUID) $(PKG_INSTALL_DIR)/usr/bin/schroot $(1)/usr/bin/
$(INSTALL_DIR) $(1)/etc/schroot
$(CP) -R $(PKG_INSTALL_DIR)/etc/schroot/* $(1)/etc/schroot
$(INSTALL_DIR) $(1)/usr/lib/schroot
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/libsbuild.* $(1)/usr/lib/
$(INSTALL_DIR) $(1)/usr/libexec/schroot
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/libexec/schroot/schroot-* $(1)/usr/libexec/schroot/
$(INSTALL_DIR) $(1)/usr/share/schroot
$(CP) -R $(PKG_INSTALL_DIR)/usr/share/schroot/* $(1)/usr/share/schroot/
$(INSTALL_DIR) $(1)/etc/init.d
$(INSTALL_BIN) ./files/schroot.init $(1)/etc/init.d/schroot
endef
$(eval $(call BuildPackage,schroot))

View file

@ -1,10 +0,0 @@
#!/bin/sh /etc/rc.common
START=94
start() {
[ -d /var/lib/schroot ] || {
mkdir -p /var/lib/schroot/session /var/lib/schroot/unpack /var/lib/schroot/union/overlay /var/lib/schroot/union/underlay
chmod 0700 /var/lib/schroot
}
}

View file

@ -1,169 +0,0 @@
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -210,8 +210,8 @@ endif(BUILD_PAM)
set(BLOCKDEV_DEFAULT ON)
# LVM snapshot mount feature
-find_program(LVCREATE_EXECUTABLE lvcreate PATHS /sbin /usr/sbin /usr/local/sbin)
-find_program(LVREMOVE_EXECUTABLE lvremove PATHS /sbin /usr/sbin /usr/local/sbin)
+#find_program(LVCREATE_EXECUTABLE lvcreate PATHS /sbin /usr/sbin /usr/local/sbin)
+#find_program(LVREMOVE_EXECUTABLE lvremove PATHS /sbin /usr/sbin /usr/local/sbin)
set(LVMSNAP_DEFAULT OFF)
if (LVCREATE_EXECUTABLE AND LVREMOVE_EXECUTABLE)
set (LVMSNAP_DEFAULT ON)
@@ -224,7 +224,7 @@ if (lvm-snapshot)
endif(lvm-snapshot)
# ZFS snapshot mount feature
-find_program(ZFS_EXECUTABLE zfs PATHS /sbin /usr/sbin /usr/local/sbin)
+#find_program(ZFS_EXECUTABLE zfs PATHS /sbin /usr/sbin /usr/local/sbin)
set(ZFSSNAP_DEFAULT OFF)
if (ZFS_EXECUTABLE)
set (ZFSSNAP_DEFAULT ON)
@@ -237,7 +237,7 @@ if (zfs-snapshot)
endif(zfs-snapshot)
# Btrfs snapshot mount feature
-find_program(BTRFS_EXECUTABLE btrfs PATHS /sbin /usr/sbin /usr/local/sbin)
+#find_program(BTRFS_EXECUTABLE btrfs PATHS /sbin /usr/sbin /usr/local/sbin)
set(BTRFSSNAP_DEFAULT OFF)
if (BTRFS_EXECUTABLE)
set (BTRFSSNAP_DEFAULT ON)
@@ -310,15 +310,9 @@ include_directories(${PROJECT_BINARY_DIR
${PROJECT_BINARY_DIR}
${PROJECT_SOURCE_DIR})
-enable_testing()
-
add_subdirectory(sbuild)
add_subdirectory(bin)
-add_subdirectory(test)
-add_subdirectory(doc)
add_subdirectory(etc)
-add_subdirectory(po)
-add_subdirectory(man)
add_custom_target(check-news
COMMAND if grep -q "Welcome to ${CMAKE_PROJECT_NAME} ${GIT_RELEASE_VERSION}" "${PROJECT_SOURCE_DIR}/NEWS" \; then echo "NEWS current version ${GIT_RELEASE_VERSION}" \; else echo "NEWS current version does not match release version ${GIT_RELEASE_VERSION}" \; exit 1 \; fi
--- a/bin/schroot-base/schroot-base-run.h
+++ b/bin/schroot-base/schroot-base-run.h
@@ -61,8 +61,8 @@ namespace schroot_base
std::cout.imbue(std::locale());
std::cerr.imbue(std::locale());
- bindtextdomain (SBUILD_MESSAGE_CATALOGUE, SCHROOT_LOCALE_DIR);
- textdomain (SBUILD_MESSAGE_CATALOGUE);
+ //bindtextdomain (SBUILD_MESSAGE_CATALOGUE, SCHROOT_LOCALE_DIR);
+ //textdomain (SBUILD_MESSAGE_CATALOGUE);
typename options_type::ptr opts(new options_type);
main_type kit(opts);
--- a/sbuild/sbuild-feature.h
+++ b/sbuild/sbuild-feature.h
@@ -24,6 +24,7 @@
#include <string>
#include <boost/format.hpp>
+#include <libintl.h>
namespace sbuild
{
--- a/etc/setup.d/20copyfiles
+++ b/etc/setup.d/20copyfiles
@@ -39,9 +39,9 @@ copy_file()
if [ -e "$2" ]; then
# Device and inode
- da=$(/usr/bin/stat --format="%d %i" "$1")
+ da=$(/bin/stat --format="%d %i" "$1")
# This one can fail since it might not exist yet
- db=$(/usr/bin/stat --format="%d %i" "$2" 2>/dev/null || :)
+ db=$(/bin/stat --format="%d %i" "$2" 2>/dev/null || :)
if [ "$da" = "$db" ]; then
COPY="false"
--- a/etc/setup.d/20nssdatabases
+++ b/etc/setup.d/20nssdatabases
@@ -29,7 +29,7 @@ set -e
dup_nss()
{
info "Copying $1 database to $2"
- getent "$1" > "$2"
+ cat "/etc/$1" > "$2"
}
if [ $STAGE = "setup-start" ] || [ $STAGE = "setup-recover" ]; then
@@ -42,9 +42,9 @@ if [ $STAGE = "setup-start" ] || [ $STAG
fi
# Device and inode
- dr=$(/usr/bin/stat --format="%d %i" "/etc/$db")
+ dr=$(/bin/stat --format="%d %i" "/etc/$db")
# This one can fail since it might not exist yet
- dc=$(/usr/bin/stat --format="%d %i" "${CHROOT_PATH}/etc/$db" 2>/dev/null || :)
+ dc=$(/bin/stat --format="%d %i" "${CHROOT_PATH}/etc/$db" 2>/dev/null || :)
# If the database inside and outside the chroot is the
# same, it's very likely that dup_nss would blank the
--- a/etc/profile-templates/all/all/nssdatabases
+++ b/etc/profile-templates/all/all/nssdatabases
@@ -3,5 +3,5 @@
# <database name>
passwd
shadow
-group
-gshadow
+#group
+#gshadow
--- a/etc/profile-templates/buildd/all/nssdatabases
+++ b/etc/profile-templates/buildd/all/nssdatabases
@@ -3,5 +3,5 @@
# <database name>
passwd
shadow
-group
-gshadow
+#group
+#gshadow
--- a/etc/profile-templates/default/all/nssdatabases
+++ b/etc/profile-templates/default/all/nssdatabases
@@ -1,4 +1,4 @@
services
protocols
-networks
+#networks
hosts
--- a/etc/profile-templates/desktop/all/nssdatabases
+++ b/etc/profile-templates/desktop/all/nssdatabases
@@ -1,4 +1,4 @@
services
protocols
-networks
+#networks
hosts
--- a/etc/profile-templates/default/linux/fstab
+++ b/etc/profile-templates/default/linux/fstab
@@ -7,7 +7,7 @@
# to run additional services in the chroot. However, note that this
# may potentially cause undesirable behaviour on upgrades, such as
# killing services on the host.
-#/run /run none rw,bind 0 0
+/run /run none rw,bind 0 0
#/run/lock /run/lock none rw,bind 0 0
-#/dev/shm /dev/shm none rw,bind 0 0
-#/run/shm /run/shm none rw,bind 0 0
+/tmp/shm /dev/shm none rw,bind 0 0
+/tmp/shm /run/shm none rw,bind 0 0
--- a/etc/profile-templates/desktop/linux/fstab
+++ b/etc/profile-templates/desktop/linux/fstab
@@ -12,7 +12,7 @@
# to run additional services in the chroot. However, note that this
# may potentially cause undesirable behaviour on upgrades, such as
# killing services on the host.
-#/run /run none rw,bind 0 0
+/run /run none rw,bind 0 0
#/run/lock /run/lock none rw,bind 0 0
-#/dev/shm /dev/shm none rw,bind 0 0
-#/run/shm /run/shm none rw,bind 0 0
+/tmp/shm /dev/shm none rw,bind 0 0
+/tmp/shm /run/shm none rw,bind 0 0

View file

@ -1,5 +1,5 @@
#
# Copyright (C) 2006-2017 OpenWrt.org
# Copyright (C) 2006-2015 OpenWrt.org
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
@ -8,22 +8,18 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=sudo
PKG_VERSION:=1.9.15p5
PKG_VERSION:=1.8.14p3
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://www.sudo.ws/dist
PKG_HASH:=558d10b9a1991fb3b9fa7fa7b07ec4405b7aefb5b3cb0b0871dbc81e3a88e558
PKG_MAINTAINER:=Alexandru Ardelean <ardeleanalex@gmail.com>
PKG_LICENSE:=ISC
PKG_LICENSE_FILES:=doc/LICENSE
PKG_CPE_ID:=cpe:/a:todd_miller:sudo
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=http://www.sudo.ws/dist
PKG_MD5SUM:=93dbd1e47c136179ff1b01494c1c0e75
PKG_INSTALL:=1
PKG_BUILD_PARALLEL:=1
PKG_BUILD_FLAGS:=no-mips16
PKG_BUILD_DEPENDS:=sudo/host
include $(INCLUDE_DIR)/package.mk
@ -31,7 +27,8 @@ define Package/sudo
SECTION:=admin
CATEGORY:=Administration
TITLE:=Delegate authority to run commands
URL:=https://www.sudo.ws/
URL:=http://www.sudo.ws/
MAINTAINER:=Gergely Kiss <mail.gery@gmail.com>
endef
define Package/sudo/description
@ -46,32 +43,46 @@ define Package/sudo/conffiles
/etc/sudoers.d/
endef
CONFIGURE_ARGS += \
CONFIGURE_ARGS+= \
--without-pam \
--disable-pam-session \
--with-editor=/bin/vi \
--without-lecture \
--disable-zlib \
--disable-openssl \
--with-rundir=/var/lib/sudo \
--with-vardir=/var/lib/sudo
CONFIGURE_VARS += \
CONFIGURE_VARS+= \
sudo_cv_uid_t_len=10 \
sudo_cv_func_unsetenv_void=no
define Package/sudo/install
$(INSTALL_DIR) \
$(1)/etc/{init.d,sudoers.d} \
$(1)/usr/{bin,sbin} \
$(1)/usr/lib/sudo
include $(INCLUDE_DIR)/host-build.mk
define Host/Compile
cd $(HOST_BUILD_DIR)/lib/util; \
$(MAKE) mksiglist; $(MAKE) mksigname
endef
define Host/Install
$(INSTALL_DIR) $(STAGING_DIR_HOST)/bin
$(CP) $(HOST_BUILD_DIR)/lib/util/mksig{list,name} $(STAGING_DIR_HOST)/bin/
endef
$(eval $(call HostBuild))
define Package/sudo/install
$(INSTALL_DIR) $(1)/usr/bin
$(CP) $(PKG_INSTALL_DIR)/usr/bin/sudo $(1)/usr/bin/
chmod 4755 $(1)/usr/bin/sudo
$(INSTALL_DIR) $(1)/usr/sbin
$(CP) $(PKG_INSTALL_DIR)/usr/sbin/visudo $(1)/usr/sbin/
$(INSTALL_DIR) $(1)/etc
$(CP) $(PKG_INSTALL_DIR)/etc/sudoers $(1)/etc/
chmod 0440 $(1)/etc/sudoers
$(INSTALL_DIR) $(1)/etc/sudoers.d
$(INSTALL_DIR) $(1)/usr/lib/sudo
$(CP) $(PKG_INSTALL_DIR)/usr/lib/sudo/*.so* $(1)/usr/lib/sudo/
$(INSTALL_DIR) $(1)/etc/init.d
$(INSTALL_BIN) ./files/sudo.init $(1)/etc/init.d/sudo
endef

View file

@ -0,0 +1,25 @@
diff -rupN sudo-1.8.11p2.orig/lib/util/Makefile.in sudo-1.8.11p2/lib/util/Makefile.in
--- sudo-1.8.11p2.orig/lib/util/Makefile.in 2014-10-07 22:26:20.000000000 +0200
+++ sudo-1.8.11p2/lib/util/Makefile.in 2014-12-09 21:44:35.610041162 +0100
@@ -17,6 +17,8 @@
# @configure_input@
#
+include $(TOPDIR)/rules.mk
+
#### Start of system configuration section. ####
srcdir = @srcdir@
@@ -142,10 +144,10 @@ libsudo_util.la: $(LTOBJS) @LT_LDDEP@
esac
siglist.c: mksiglist
- ./mksiglist > $@
+ $(STAGING_DIR_HOST)/bin/mksiglist > $@
signame.c: mksigname
- ./mksigname > $@
+ $(STAGING_DIR_HOST)/bin/mksigname > $@
mksiglist: $(srcdir)/mksiglist.c $(srcdir)/mksiglist.h $(incdir)/sudo_compat.h $(top_builddir)/config.h
$(CC) $(CPPFLAGS) $(CFLAGS) $(DEFS) $(srcdir)/mksiglist.c -o $@

View file

@ -1,9 +1,10 @@
--- a/Makefile.in
+++ b/Makefile.in
@@ -75,7 +75,7 @@ EGREP = @EGREP@
diff -rupN sudo-1.8.11p2.orig/Makefile.in sudo-1.8.11p2/Makefile.in
--- sudo-1.8.11p2.orig/Makefile.in 2014-10-07 22:26:20.000000000 +0200
+++ sudo-1.8.11p2/Makefile.in 2014-12-09 22:00:27.256934143 +0100
@@ -62,7 +62,7 @@ SHELL = @SHELL@
SED = @SED@
INSTALL = $(SHELL) $(scriptdir)/install-sh -c
INSTALL = $(SHELL) $(top_srcdir)/install-sh -c
-INSTALL_OWNER = -o $(install_uid) -g $(install_gid)
+INSTALL_OWNER =

View file

@ -0,0 +1,12 @@
diff -rupN sudo-1.8.14p3.orig/include/sudo_util.h sudo-1.8.14p3/include/sudo_util.h
--- sudo-1.8.14p3.orig/include/sudo_util.h 2015-07-22 14:22:49.000000000 +0200
+++ sudo-1.8.14p3/include/sudo_util.h 2015-08-30 18:41:24.509814946 +0200
@@ -23,6 +23,8 @@
# include "compat/stdbool.h"
#endif /* HAVE_STDBOOL_H */
+#include <sys/types.h>
+
/*
* Macros for operating on struct timeval.
*/

View file

@ -1,7 +0,0 @@
#!/bin/sh
case "$1" in
sudo)
sudo --version | grep "$2"
;;
esac

View file

@ -1,158 +0,0 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=syslog-ng
PKG_VERSION:=4.4.0
PKG_RELEASE:=1
PKG_MAINTAINER:=Josef Schlehofer <pepe.schlehofer@gmail.com>
PKG_LICENSE:=LGPL-2.1-or-later GPL-2.0-or-later
PKG_LICENSE_FILES:=COPYING LGPL.txt GPL.txt
PKG_CPE_ID:=cpe:/a:balabit:syslog-ng
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://github.com/syslog-ng/syslog-ng/releases/download/$(PKG_NAME)-$(PKG_VERSION)/
PKG_HASH:=583b147f3ec17fbc2dbbf31aafb1e3966237d7541313de5b41ea885dc16d932e
PKG_BUILD_PARALLEL:=1
PKG_INSTALL:=1
PKG_BUILD_DEPENDS:= \
HOST_OS_MACOS:fakeuname/host \
PKG_CONFIG_DEPENDS:= \
CONFIG_IPV6 \
include $(INCLUDE_DIR)/package.mk
include $(INCLUDE_DIR)/nls.mk
ifeq ($(CONFIG_HOST_OS_MACOS),y)
include ../../utils/fakeuname/fakeuname.mk
endif
define Package/syslog-ng
SECTION:=admin
CATEGORY:=Administration
TITLE:=A powerful syslog daemon
URL:=https://www.syslog-ng.com/products/open-source-log-management/
DEPENDS:=+libpcre2 +glib2 +libopenssl +libpthread +librt +zlib +libdbi +libjson-c +libcurl +libuuid +SYSLOGNG_LOGROTATE:logrotate
endef
define Package/syslog-ng/description
syslog-ng reads and logs messages to the system console, log
files, other machines and/or users as specified by its
configuration file.
endef
define Package/syslog-ng/conffiles
/etc/syslog-ng.conf
/etc/syslog-ng.d/
/etc/scl.conf
endef
define Package/syslog-ng/config
config SYSLOGNG_LOGROTATE
bool "Logrotate support"
depends on PACKAGE_syslog-ng
default n
help
It adds support for logrotate functionality.
config SYSLOGNG_LOGROTATE_MAXSIZE
string "Maximum size of /var/log/messages log file"
depends on SYSLOGNG_LOGROTATE
default "1M"
help
Log files are rotated when they grow bigger than defined size bytes.
config SYSLOGNG_LOGROTATE_ROTATE_COUNT
int "Maximum rotation count for /var/log/messages log file"
depends on SYSLOGNG_LOGROTATE
default 1
help
Log files are rotated count times before being removed or mailed to
the address specified in a mail directive. If count is 0, old
versions are removed rather than rotated.
endef
define Build/Configure
$(SED) 's,-I/usr/include,,' $(PKG_BUILD_DIR)/configure
$(Build/Configure/Default)
endef
LOGROTATE_MAXSIZE:=$(call qstrip,$(CONFIG_SYSLOGNG_LOGROTATE_MAXSIZE))
LOGROTATE_ROTATE:=$(call qstrip,$(CONFIG_SYSLOGNG_LOGROTATE_ROTATE_COUNT))
CONFIGURE_ARGS += \
--disable-afsnmp \
$(call autoconf_bool,CONFIG_IPV6,ipv6) \
--disable-tcp-wrapper \
--disable-spoof-source \
--disable-sql \
--disable-linux-caps \
--with-jsonc=system \
--enable-cpp=no \
--enable-json=yes \
--enable-http=yes \
--disable-smtp \
--disable-mqtt \
--disable-redis \
--disable-dependency-tracking \
--disable-python \
--disable-geoip2 \
--disable-java \
--disable-java-modules \
--with-librabbitmq-client=no \
--with-mongoc=no
CONFIGURE_VARS += \
$(if $(CONFIG_HOST_OS_MACOS),PATH=$(FAKEUNAME_PATH):$(PATH)) \
LIBDBI_CFLAGS="-I$(STAGING_DIR)/usr/include"
define Package/syslog-ng/install
cd $(PKG_BUILD_DIR); make DESTDIR=$(1) install
$(call libtool_remove_files,$(1)) # This removes .la files in folder (including subfolders) /usr/lib
rm -rf $(1)/usr/lib/pkgconfig \
$(1)/usr/lib/*.a \
$(1)/usr/include \
$(1)/var
$(INSTALL_DIR) $(1)/etc/init.d
$(INSTALL_BIN) ./files/syslog-ng.init $(1)/etc/init.d/syslog-ng
$(INSTALL_DIR) $(1)/etc/syslog-ng.d
$(INSTALL_DATA) ./files/syslog-ng.conf $(1)/etc
touch $(1)/etc/syslog-ng.d/.keep
$(INSTALL_DIR) $(1)/sbin
$(INSTALL_BIN) ./files/logread $(1)/sbin
$(INSTALL_DIR) $(1)/usr/share/syslog-ng/include/
$(CP) -r ./files/scl $(1)/usr/share/syslog-ng/include/
ifneq ($(strip $(CONFIG_SYSLOGNG_LOGROTATE)),)
$(INSTALL_DIR) $(1)/etc/logrotate.d
sed \
-e 's#@MAXSIZE@#$(LOGROTATE_MAXSIZE)#g' \
-e 's#@ROTATE@#$(LOGROTATE_ROTATE)#g' \
./files/syslog-ng.logrotate > $(1)/etc/logrotate.d/syslog-ng.conf
endif
endef
define Package/syslog-ng/postinst
#!/bin/sh
[ -n "$$IPKG_INSTROOT" ] || {
/etc/init.d/syslog-ng enable
/etc/init.d/syslog-ng restart
}
endef
define Package/syslog-ng/prerm
#!/bin/sh
[ -n "$$IPKG_INSTROOT" ] || {
/etc/init.d/syslog-ng disable
/etc/init.d/syslog-ng stop
}
endef
$(eval $(call BuildPackage,syslog-ng))

View file

@ -1,76 +0,0 @@
#!/bin/sh
# Shell script compatibility wrapper for /sbin/logread
#
# Copyright (C) 2019 Dirk Brenken <dev@brenken.org>
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
# General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
#
logfile="/var/log/messages"
if [ ! -f "${logfile}" ]
then
printf "%s\n" "Error: logfile not found!"
exit 2
fi
usage()
{
printf "%s\n" "Usage: logread [options]"
printf "%s\n" "Options:"
printf "%5s %-10s%s\n" "-l" "<count>" "Got only the last 'count' messages"
printf "%5s %-10s%s\n" "-e" "<pattern>" "Filter messages with a regexp"
printf "%5s %-10s%s\n" "-f" "" "Follow log messages"
printf "%5s %-10s%s\n" "-h" "" "Print this help message"
}
if [ -z "${1}" ]
then
cat "${logfile}"
exit 0
else
while [ "${1}" ]
do
case "${1}" in
-l)
shift
count="${1//[^0-9]/}"
tail -n "${count:-50}" "${logfile}"
exit 0
;;
-e)
shift
pattern="${1}"
grep -E "${pattern}" "${logfile}"
exit 0
;;
-f)
tail -f "${logfile}"
exit 0
;;
-fe)
shift
pattern="${1}"
tail -f "${logfile}" | grep -E "${pattern}"
exit 0
;;
-h|*)
usage
exit 1
;;
esac
shift
done
fi

View file

@ -1,6 +0,0 @@
#!/bin/sh
if [ "$(sysctl -n net.ipv6.conf.lo.disable_ipv6)" = "0" ]; then
echo 'network(ip("::1") port(514) transport(udp) ip-protocol(6) )'
else
echo 'network(ip("127.0.0.1") port(514) transport(udp) ip-protocol(4) )'
fi

View file

@ -1 +0,0 @@
@module confgen context(source) name(network_localhost) exec("`scl-root`/network_localhost/detect.sh")

View file

@ -1,67 +0,0 @@
#############################################################################
# OpenWrt syslog-ng.conf specific file
# which collects all local logs into a single file called /var/log/messages.
# More details about these settings can be found here:
# https://www.syslog-ng.com/technical-documents/list/syslog-ng-open-source-edition
@version: 4.4
@include "scl.conf"
options {
chain_hostnames(no); # Enable or disable the chained hostname format.
create_dirs(yes);
keep_hostname(yes); # Enable or disable hostname rewriting.
log_fifo_size(256); # The number of messages that the output queue can store.
log_msg_size(1024); # Maximum length of a message in bytes.
stats_freq(0); # The period between two STATS messages (sent by syslog-ng, containing statistics about dropped logs) in seconds.
flush_lines(0); # How many lines are flushed to a destination at a time.
use_fqdn(no); # Add Fully Qualified Domain Name instead of short hostname.
};
# syslog-ng gets messages from syslog-ng (internal) and from /dev/log
source src {
internal();
unix-dgram("/dev/log");
};
source net {
network_localhost();
};
source s_network {
default-network-drivers(
# NOTE: TLS support
#
# the default-network-drivers() source driver opens the TLS
# enabled ports as well, however without an actual key/cert
# pair they will not operate and syslog-ng would display a
# warning at startup.
#
#tls(key-file("/path/to/ssl-private-key") cert-file("/path/to/ssl-cert"))
);
};
source kernel {
file("/proc/kmsg" program_override("kernel"));
};
destination messages {
file("/var/log/messages");
};
log {
source(src);
source(net);
source(kernel);
destination(messages);
# uncomment this line to open port 514 to receive messages
#source(s_network);
};
#
# Finally, include any user settings last so that s/he can override or
# supplement all "canned" settings inherited from the distribution.
#
@include "/etc/syslog-ng.d/" # Put any customization files in this directory

View file

@ -1,17 +0,0 @@
#!/bin/sh /etc/rc.common
# Copyright (C) 2006-2019 OpenWrt.org
START=50
USE_PROCD=1
start_service() {
[ -f /etc/syslog-ng.conf ] || return 1
procd_open_instance
procd_set_param command /usr/sbin/syslog-ng --foreground
procd_close_instance
}
reload_service() {
/usr/sbin/syslog-ng-ctl reload
}

View file

@ -1,12 +0,0 @@
/var/log/messages {
compress
copytruncate
delaycompress
notifempty
maxsize @MAXSIZE@
missingok
postrotate
/usr/sbin/syslog-ng-ctl reload > /dev/null
endscript
rotate @ROTATE@
}

Some files were not shown because too many files have changed in this diff Show more