Commit Graph

5689 Commits

Author SHA1 Message Date
Dirk Brenken 1f81686c0e
Merge pull request #10055 from claell/patch-1
adblock: Cosmetic changes to README.md
2019-09-24 15:14:15 +02:00
Dirk Brenken 8c2264a2da
Merge pull request #10034 from onjen/captive-optional-args
travelmate: add support for optional args in auto-login script
2019-09-24 15:13:41 +02:00
Rosen Penev acc646dafb
Merge pull request #9940 from neheb/tr2
transmission: Fix tracker issue with some firewalls
2019-09-23 17:28:10 -07:00
Nikos Mavrogiannopoulos 6358c3e72e
Merge pull request #10045 from yousong/oc-form
openconnect: allow specifying form_entry list
2019-09-23 20:57:05 +02:00
Rosen Penev 730a1697fe transmission: Fix tracker issue with some firewalls
Some firewalls mandate a minimum size of 4k for SYN packets, which
transmission does not do by default. Upstream issue here:

https://github.com/transmission/transmission/issues/964

Cleanup:

Fixed license info.

Removed two unnecessary patches.

Ran shell script through shellcheck.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-09-23 11:41:10 -07:00
Claudius Ellsel 088a14e5ce adblock: Cosmetic changes to README.md
Add code blocks for easier reading and change "dns" to "DNS".

Signed-off-by: Claudius Ellsel <claudius.ellsel@live.de>
2019-09-23 16:52:17 +02:00
David Yang f9cf4e1f2c i2pd: Update to 2.28.0
Signed-off-by: David Yang <mmyangfl@gmail.com>
2019-09-22 13:42:04 +08:00
Rosen Penev 78248fb2fd
miniupnpc: Update to 2.1.20190824
Switched to CMAKE_INSTALL to get rid of InstallDev.

Added PKG_BUILD_PARALLEL for faster compilation.

Fixed license information.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-09-21 15:57:41 -07:00
Rosen Penev 61b5f5b16c
cshark: Switch to standard PKG_SOURCE_VERSION/DATE
Several other cleanups.

Added PKG_BUILD_PARALLEL for faster compilation.

Removed PKG_INSTALL as cmake.mk already defines it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-09-21 15:56:58 -07:00
Diana Dragusin bda3b710ba phantap: update to latest commit
7cc6017 phantap-learn: Add another way to detect the victim
8a4b30b phantap-learn: Continue listening for DNS traffic after initial detection
3e1cf09 Improve setup documentation
ddde4b9 Fix neighbour spelling
bee7e92 Readme.md: Update
efb57f6 Readme.md: Update

Signed-off-by: Diana Dragusin <diana.dragusin@nccgroup.com>
2019-09-21 14:53:32 -07:00
Yousong Zhou 384398d452 openconnect: allow specifying form_entry list
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2019-09-21 10:33:18 +00:00
Johannes Rothe a7f87f939d travelmate: add support for optional args in auto-login script
This can be helpful for example in hotels where you need to
enter a new user/password combination every week.

Signed-off-by: Johannes Rothe <mail@johannes-rothe.de>
2019-09-20 22:15:17 +02:00
Rosen Penev a0516d7e1d
Merge pull request #10027 from James-TR/fix/pdns-lua-dep
pdns: Explicitly define lua implementation
2019-09-18 11:52:08 -07:00
Jan Pavlinec b42159dea3 irssi: update to version 1.2.2 (security fix)
Fixes CVE-2019-15717

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-09-18 20:12:17 +02:00
James Taylor 001e30e387 pdns: Explicitly define lua implementation
Compile Tested: yes, selects lua as implementation and doesn't pick up luajit
Run Tested: no, minor change

Maintainer: me

Description:
On some architectures PowerDNS was preferring Luajit over Lua, which wasn't added
as a dependency. On previous versions this was controlled by passing `--with-lua`
and `--without-luajit` however this isn't functional anymore.

On the 4.2 series, it is instead possible to define the lua implementation to be
used by passing `--with-lua=[implementation]` ie `--with-lua=lua`

Signed-off-by: James Taylor <james@jtaylor.id.au>
2019-09-19 00:11:04 +10:00
Jan Pavlinec 299e5b0a9b
treewide: add PKG_CPE_ID for better cvescanner coverage
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-09-17 12:40:26 +02:00
Florian Eckert ffe358b918
Merge pull request #10015 from mwarning/zt
zerotier: update to 1.4.6
2019-09-17 08:35:10 +02:00
Rosen Penev 0fa6b85686
ulogd: Add back autoreconf
Compile fails at times, probably because of the patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-09-16 17:49:17 -07:00
Moritz Warning 6181852408 zerotier: update to 1.4.6
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2019-09-17 01:37:24 +02:00
Rosen Penev b505803714
Merge pull request #9995 from flyn-org/scapy
scapy: update to 2.4.3
2019-09-16 09:46:59 -07:00
Dirk Brenken 496d527080
adblock: update 3.8.6
* refine stop logic to prevent needless dns backend restarts
  and other oddities
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
2019-09-16 10:49:37 +02:00
Yousong Zhou feacaa5f80 openvswitch: bump to version 2.12.0
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2019-09-16 07:59:31 +00:00
Stijn Tintel 6bcfacca5e strongswan: bump to 5.8.1
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2019-09-16 02:28:20 +03:00
W. Michael Petullo aa96854564 scapy: fix PKG_LICENSE_FILES
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2019-09-15 13:36:52 -04:00
Rosen Penev 744fc97820
Merge pull request #9584 from ynezz/upstream/move-scons
scons: move host build tool to a proper place
2019-09-15 07:21:52 -07:00
W. Michael Petullo 3c9ce19f92 scapy: update to 2.4.3
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2019-09-14 12:11:19 -04:00
Toke Høiland-Jørgensen 1126368e0e sqm-scripts: Bump to v1.4.0
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2019-09-14 13:19:23 +02:00
Hannu Nyman 05c939c643
Merge pull request #9986 from neheb/nut
nut: Switch to pkgconfig for finding libgd
2019-09-14 10:39:16 +03:00
Rosen Penev 81e6bb77cf
nut: Switch to pkgconfig for finding libgd
nut uses gdlib-config to find libgd, which happens to be deprecated. This
switches it to use pkgconfig and allows a fallback to gdlib-config, same
as the libusb check.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-09-13 12:56:43 -07:00
Ted Hess 2d49aab04c dnscrypt-proxy: Update to latest git version.
Revise dnscrypt-resolvers.csv with new dnscrypt-ca info.

Signed-off-by: Ted Hess <thess@kitschensync.net>
2019-09-13 14:46:44 -04:00
Rosen Penev 58e8fe2fee
Merge pull request #9983 from James-TR/pdns-4.2.0-bump
pdns: bump version to 4.2.0
2019-09-13 10:59:03 -07:00
James Taylor d7fb1e3fca pdns: bump version to 4.2.0
Bump PowerDNS Authoritative DNS Server to 4.2.0. Release changelong can be found at
https://doc.powerdns.com/authoritative/changelog/4.2.html#change-4.2.0

Compile Tested: OpenWRT Snapshot - armv7
Run Tested: Linksys WRT1900ACS - package runs correctly, not all functionality has been tested.

Signed-off-by: James Taylor <james@jtaylor.id.au>
2019-09-13 23:14:55 +10:00
Jo-Philipp Wich a8b4a28372 cgi-io: use splice() to stream backup archive
This improves the I/O performance when outputting large backups.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-09-13 13:05:09 +02:00
Jo-Philipp Wich 8c22db6531 cgi-io: pass appropriate HTTP error codes to failure()
Instead of always replying with a generic 500 internal server error code,
use more appropriate codes such as 403 to indicate denied permissions.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-09-13 13:05:09 +02:00
Jo-Philipp Wich ab2a2b080d cgi-io: add download operation
Add a new `cgi-download` applet which allows to retrieve the contents
of regular files or block devices.

In order to initiate a transfer, a POST request in x-www-form-urlencoded
format must be sent to the applet, with one field "sessionid" holding
the login session and another field "path" containing the file path to
download.

Further optional fields are "filename" which - if present - will cause
the download applet to set a Content-Dispostition header and "mimetype"
which allows to let the applet respond with a specific type instead of
the default "application/octet-stream".

Below is an example for the required acl rules to grant download access
to files or block devices:

    ubus call session grant '{
        "ubus_rpc_session": "...",
        "scope": "cgi-io",
        "objects": [
            [ "download", "read" ]
        ]
    }'

    ubus call session grant '{
        "ubus_rpc_session": "...",
        "scope": "file",
        "objects": [
            [ "/etc/config/*", "read" ],
            [ "/dev/mtdblock*", "read" ]
        ]
    }'

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-09-13 13:05:09 +02:00
Jo-Philipp Wich c8a86c8c8e cgi-io: use different acl scopes for path and command permissions
Use the `cgi-io` scope to check for permission to execute the requested
command (`upload`, `backup`) and the `file` scope to check path
permissions.

The reasoning of this change is that `cgi-io` is usually used in
conjunction with `rpcd-mod-file` to transfer large file data out
of band and `rpcd-mod-file` already uses the `file` scope to manage
file path access permissions. After this change, both `rpc-mod-file`
and `cgi-io` can share the same path acl rules.

Write access to a path can be granted by using an ubus call in the
following form:

    ubus call session grant '{
        "ubus_rpc_session": "...",
        "scope": "file",
        "objects": [
            [ "/var/lib/uploads/*", "write" ]
        ]
    }'

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-09-13 13:05:09 +02:00
Alexandru Ardelean dc08f0fab8 seafile-seahub: update dependency to python-mysqlclient
The `python-mysql` package was updated with PR https://github.com/openwrt/packages/pull/9705

For seahub this was omitted, since the Python dependencies are prefixed
with `python-`, so it was missed during the grep search.
And grepping just for `mysql` yields many results.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-09-13 12:27:23 +03:00
Petr Štetiar c3bacb6631 iotivity,smartsnmpd,gpsd: use scons from feed
commit 0c090fde68b2 ("scons: move host build tool to a proper place")
has moved scons into the packages feeds, so switch to that package
include and adjust build dependency to a new scons home.

Signed-off-by: Petr Štetiar <ynezz@true.cz>
2019-09-13 07:14:08 +02:00
Paul Tobias 21f5cdd2fa
ddns-scripts: Use https for domains.google.com
Without https the update fails with:

```
 132954       : #> /usr/bin/curl -RsS -o /var/run/ddns/myddns_ipv4.dat --stderr /var/run/ddns/myddns_ipv4.err --noproxy '*' 'http://CENSORED:***PW***@domains.google.com/nic/update?hostname=CENSORED&myip=CENSORED'
 132954       : DDNS Provider answered:
<HTML>
<HEAD>
<TITLE>Moved Temporarily</TITLE>
</HEAD>
<BODY BGCOLOR="#FFFFFF" TEXT="#000000">
<H1>Moved Temporarily</H1>
The document has moved <A HREF="https://domains.google.com/nic/update?hostname=CENSORED&amp;myip=CENSORED">here</A>.
</BODY>
</HTML>
 132954 ERROR : IP update not accepted by DDNS Provider
```

Signed-off-by: Paul Tobias <tobias.pal@gmail.com>
2019-09-12 15:26:07 -07:00
Rosen Penev eadd5abe40
smartsnmpd: Update to 2015-02-22 version
Ran through 2to3 to get it to compile.

Ran init script through shellcheck. Grouped several file writes.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-09-12 15:11:49 -07:00
Rosen Penev 73a81c586d
Merge pull request #9937 from mwarning/zerotier
zerotier: license change and make sure path exists
2019-09-12 14:20:04 -07:00
William Fleurant 1147695a9f yggdrasil: fix #9960 re: vendor fix
Signed-off-by: William Fleurant <meshnet@protonmail.com>
2019-09-12 14:28:02 -04:00
Rosen Penev 61ccd29d37
Merge pull request #9705 from commodo/python-mysqlclient
python-mysql[client]: rename to python-mysqlclient & bump to version 1.4.4
2019-09-12 08:53:27 -07:00
Rosen Penev 408ccf7946
Merge pull request #9952 from neheb/rt
rtorrent: Switch to static linking
2019-09-11 22:48:40 -07:00
Dirk Brenken 04bd683af8
banip: update 0.2.1
* fix for #9954

Signed-off-by: Dirk Brenken <dev@brenken.org>
2019-09-10 19:34:49 +02:00
Sven Eckelmann bbb1ea7345 treewide: Change .*GPL.*+ licenses to SPDX compatible identifier
The CONTRIBUTING.md requests an (or multiple) SPDX identifier for GPL
licenses. But a lot of packages did use a different, non-SPDX style with a
"+" at the end instead of "-or-later".

Signed-off-by: Sven Eckelmann <sven@narfation.org>
2019-09-10 07:45:15 +02:00
Rosen Penev 331201deae
Merge pull request #9947 from eglooca/master
netifyd: Updated to v2.92.
2019-09-09 22:20:05 -07:00
Rosen Penev 358495f118
rtorrent: Switch to using static libtorrent
rtorrent is the only user of libtorrent. Statically link to save space.

Added usleep patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-09-09 15:32:29 -07:00
Dirk Brenken 9b18f3ac82
Merge pull request #9948 from dibdot/banIP
banip: update 0.2.0
2019-09-09 21:25:25 +02:00
Dirk Brenken 5f49601e63
banip: update 0.2.0
* remove 'http-only' mode, all sources are now fetched from https sites
* the backup mode is now mandatory ('/tmp' is the default backup
  directory), always create and re-use backups if available.
  To force a re-download take the 'reload' action.
* support 'sshd' in addition to 'dropbear' for logfile parsing
  to detect break-in events
* always update the black-/whitelist with logfile parsing results
  in 'refresh' mode (no new downloads)
* rework the return code handling
* tweak procd trigger
* various small fixes
* (s)hellsheck cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
2019-09-09 21:11:10 +02:00