haproxy: Update patches for HAProxy v2.0.8

- Add new patches (see https://www.haproxy.org/bugs/bugs-2.0.8.html)

Signed-off-by: Christian Lachner <gladiac@gmail.com>

python,python3: Add PYPI_SOURCE_NAME to pypi.mk

This adds a new (optional) variable, PYPI_SOURCE_NAME, to pypi.mk.

For some PyPi packages (e.g. aiohttp_cors, click, django-compressor),
the name of the package and the source tarball name are slightly
different (usually by capitalisation or hyphen/underscore change).

This new variable is to make this difference explicit. PYPI_NAME is
meant for the "official" package name, whereas PYPI_SOURCE_NAME is meant
for the source tarball name.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry-picked from commit 1bacdd52f727c1417b45e4d9d58e3436a9ca06fa)

google-authenticator-libpam: fix install section

Signed-off-by: Alexander Ryzhov <github@ryzhov-al.ru>
(cherry-picked from 422e8d9d1c46e0657aa0e894fa0b81a410d7e43b)

python,python3: Add pypi makefile

This adds pypi.mk, which can be included in Python packages that
download their sources from PyPI, to auto-fill various PKG_* variables
based on the value of PYPI_NAME.

This makefile should be included after $(TOPDIR)/rules.mk but before
$(INCLUDE_DIR)/package.mk (and $(INCLUDE_DIR)/host-build.mk).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry-picked from commit add4c4219109e359f2ade2245fddfe4addc7575f)

adblock: update 3.8.7

* prevent forced parallel adblock service starts
* refine service trigger

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit a9aae9095fc0c114b932e94e8d0dbc5b9fd471b3)

django: bump to version 1.11.25

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit e9e687a1f14a1d8938959a0b6594d6df31fded62)

python-cffi: bump to version 1.13.1

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from dff2fe2963e029419046031e65d0dab6f2952012)

ruby: update to 2.6.5

2.6.5 fixes:
* CVE-2019-16255: A code injection vulnerability of Shell#[] and Shell#test
* CVE-2019-16254: HTTP response splitting in WEBrick (Additional fix)
* CVE-2019-15845: A NUL injection vulnerability of File.fnmatch and File.fnmatch?
* CVE-2019-16201: Regular Expression Denial of Service vulnerability of WEBrick’s Digest access authentication

2.6.4 fixes:
* Multiple jQuery vulnerabilities in RDoc

Changelog: https://github.com/ruby/ruby/compare/v2_6_3...v2_6_5

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry picked from commit d3d0c281494b32cd9785a82cbb432b28d5254c91)

btrfs-progs: Update to version 5.3

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 8262696cc48205f92d462458c921b7fb8ccfe7d0)

circleci: Use 19.07 snapshot SDK

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

circleci: Add 19.07 GPG/usign public keys, verify keys

This also updates the user id comments for GPG keys and untrusted
comments for usign keys.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 89d6f51c98978bbdb61c6ada9d2264cf7dca854c)

django-ranged-response: update packaging format + add python3 variant

This change also updates the maintainer email to cotequeiroz@gmail.com, as
requested on a different change.

Not updating deps here, since that will be done in the next changeset that
will convert packages to the Python[3] packaging format.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 70ebc7a2f4664c52f3e57e48fc5f707a859089fb)

Merge pull request #10342 from gladiac1337/haproxy-2.0.8-openwrt-19.07

[openwrt-19.07] haproxy: Update HAProxy to v2.0.8

flup: add Python3 variant and src package

- Add PKG_LICENSE_FILES
- Reorder things in Makefile
- Add dependency python3-logging otherwise I cannot import
flup.server.ajp
flup.server.scgi

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit a5b2ba9b4d6ec4045a1b534561d5e5eae262b0fe)

haproxy: Update HAProxy to v2.0.8

- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>

django-statici18n: fix changes in merge

django-web-pack-loader: fix changes in merge conflict

travelmate: update 1.5.1

* fix section naming in wireless & travelmate config
* check/enable disabled 'wifi-device' sections
* fix LuCI frontend issues (separate PR)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 7554f5d89197c3044c7d14b2ca90357d19ec57ae)

django: move django* packages under django submenu

This changes the python[3]-django dependencies in packages to be
non-selecting, and adds an MDEPENDS line so that the *-src packages get
placed inside the django menu as well.

Added MENU:= to the src-package definitions in python[3]-package.mk,
so it does not import that setting from the binary package.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from commit 90527d75afe1847fdddad973ca4ad988f826c8c4)

django-simple-captcha: update packaging format + add python3 variant

This change also updates the maintainer email to cotequeiroz@gmail.com, as
requested on a different change.

Also, changing here is the download URL to github's codeload, since that
one offers .tar.gz archives.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 545cff8b630efc844bb60d9d0ca07ef65133f548)

python-qrcode: update Eneas' email as per prev request

The email change was part of a previous request from a different PR series.
In this series, the change is the only thing left to do (from what the
original changeset intended to do).

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit f5eb040e6bf89d07d4671523dd1b1c8d1e9960a7)

python-qrcode: add Python3

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 6c7a31ec5efc074433c5743a6d878784551c8fc8)

seafile-seahub: use python-pillow as dep

The pillow package has been updated to the Python[3] packaging format, and
now the package names are `python-pillow` & `python3-pillow`.
This change updates seafile-seahub to use it.

Not updating other packages as they will be converted to Python[3]
packaging format.

And not bumping PKG_RELEASE here as it will be done in the last commit that
updates deps for seafile-seahub.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit cc33edc1380a7540276420543b99fb5e4df74b3e)

net: seafile-seahub: update maintainer & license file

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 5fd0baac09dd82ff7f7707c29ad4b0c5af197bbd)

django-restframework: update packaging format + add python3 variant

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 441f4860816dbc24ed5afd3e686e6bb5786bc14c)

django-postoffice: update packaging format + add python3 variant

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 15272fcc65fdc28ab45f5642234c5139b90e2990)

django-picklefield: update packaging format + add python3 variant

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 6a7f547a387bf9a22ab8744abab7d2dcb4867ffb)

django-jsonfield: update packaging format + add python3 variant

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 7bbc5131f2c38c4bc3b6be0b0522e3c1762a1748)

django-formtools: update packaging format + add python3 variant

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit e4d8127cae272c2294897ab5aa5fab2a8ea2b75b)

django-compressor: update packaging format + add python3 variant

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 35cddd9b6ffe610005ae04b2df20b52d35c06222)

django-appconf: update packaging format + add python3 variant

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 3392fbc6fcfee2b2ee4aa661261fee7e27ce8100)

seafile-seahub: whitespace update

Just un-indent the package definition a bit.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 0b29c86969fbac23a3d6b7d0fa41c6949fa560e1)

django-constance: convert to python pkg format + add python3 variant

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 1b2936a2d0dc469f1c9e42bf694cc5d4c6bb974d)

django: convert to python pkg format + add python3 variant

This also updates all dependencies to use the new `python-django` package.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit f026dba26ee31877d5170b9cbfc68d0eddcdb305)

seafile-seahub: de-couple build a bit more

seafile-seahub's build is a mess.
It hijacks some OpenWrt mk files into the build.

This can be avoided by provided some of the required parameters via
env-vars and patching the env-vars into the build.
Which is what this patch does.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit cf9975544476fc268432fcb24b07707b4f5ba39a)

seafile-seahub: move all prefix-ed python packages to var

The change is mostly organizational.
More packages will be moved to have python- or python3- prefixes.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 1c5f5b61d3c8515177c6a81be2806a0afd848fe4)

collectd: build RouterOS modules

This allows collectd to get data of Mikrotik devices in a improved way than via SNMP.

closes #10327

Signed-off-by: Sven Roederer <devel-sven@geroedel.de>
cherry-pick does not apply cleanly changed PKG_RELEASE number.
(cherry picked from commit 4261f45734d13eb0f2b552b84cf2fac6d7875a6e)
Signed-off-by: Florian Eckert <fe@dev.tdt.de>

python-pillow: bump to version 6.2.0

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

pillow: add Python3 variant and update to 6.1.0

- Add @commodo as maintainer

Co-Authored-By: Jeffery To <jeffery.to@gmail.com>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

klish: Remove unused libstdcpp dependency

This is not a C++ project.

Added PKG_BUILD_PARALLEL for faster compilation.

Cleaned up Makefile to modern standards.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from b2885143080b0da5709fcbc18cb07ed962515d34)

youtube-dl: Update to version 2019.10.16

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 07d5595)

librouteros: add package

librouteros is a library to communicate with RouterOS, the operating system of MikroTik's
RouterBoards. It uses the API port provided by those systems to connect and talk to the
devices.

API connections must be explicitly enabled. To do so, issue the following command:

> /ip service enable api

Signed-off-by: Sven Roederer <devel-sven@geroedel.de>
(cherry-picked from commit abaca50b5775bfe18104580598877312ee8876d3)

Merge pull request #10323 from jefferyto/python-2.7.17-openwrt-19.07

[openwrt-19.07] python: Update to 2.7.17, refresh patches

Merge pull request #10311 from stangri/19.07-vpnbypass

[19.07] vpnbypass: bugfix: PROCD command not found on stop

python: Update to 2.7.17, refresh patches

Patches already merged and so removed:
* 011-fix-ssl-build-use-have-npn.patch
* 019-bpo-36216-Add-check-for-characters-in-netloc-that-normalize-to-separators-GH-12216.patch
* 020-bpo-36216-Only-print-test-messages-when-verbose-GH-12291.patch
* 021-2.7-bpo-35121-prefix-dot-in-domain-for-proper-subdom.patch
* 022-bpo-30458-Disallow-control-chars-in-http-URLs-GH-13315.patch
* 023-bpo-35907-Avoid-file-reading-as-disallowing-the-unnecessary-URL-scheme-in-urllib-GH-11842.patch
* 027-bpo-38243-Escape-the-server-title-of-DocXMLRPCServer.patch
* 028-bpo-34155-Dont-parse-domains-containing-GH-13079.patch

Patches no longer necessary and so removed:
* 017_lib2to3_fix_pyc_search.patch

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 83b300aa83f3cf663747998f4500a8592acf9959)

python3: Update to version 3.7.5

setuptools: Updated to version 41.2.0
pip: Updated to version 19.2.3

Removed patches:
- 017: code was refactored
- 02{5,6,7,8}: those patches were backported from upstream and they are
included in 3.7.5

Refreshed patches

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

python-ipaddress: Update to 1.0.23

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 21858952976aad8ad92cbe76351c5535c39a3f2f)

python-automat: Update to 0.8.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 57b4938babc41aa6e80709e4ba29bc6bec6a9472)

python-attrs: Update to 19.3.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 8c3f7dcc36a7b8af2069bbbd67cb745ac4b21dec)

python-cryptography: Update to 2.8

With this update, the package no longer depends on python-asn1crypto[1].

[1]: https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst#28---2019-10-16

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 23f308123c39236c6ceeaa7ffa8ecf18fda29e4d)

python-cffi: Update to 1.13.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 141ead6bd7f2a7860b24b08897aabf542a25e389)

vpnbypass: bugfix: PROCD command not found on stop

Signed-off-by: Stan Grishin <stangri@melmac.net>

git: Update to version 2.23.0

Refresh patches

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit d8d736711d02bb9a9fabc2fcbf8a8424e8e6936a)

dnscrypt-proxy2: Update to version 2.0.28

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 4370331d799945feec02bbfe5abd319522460191)

netdata: Update to version 1.18.1

Enable PKG_BUILD_PARALLEL

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 603ead3ad80a0cf02db7ffdf62b0cf604134f3fc)

golang: Update to version 1.13.3

Fixes CVE-2019-17596

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 10d55f6)

travelmate: update 1.5.0

* add WPA3 support
* fix service status message
* refine trigger handling

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit ab51b1ba34c1b82a10c8b392978746dd5e1e03ef)

adblock: minor update 3.8.6-2

* fix service status message
* refine readme regarding reload cron job (provided by @novoid)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit a94610c88fb851072ea98b7fb41cd2ca10aa9f3d)

bind: Update to version 9.14.6

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 61dcd6849f8314ee68e1600ba75e96da246f54c5)

bind: Update to version 9.14.5

Add PKG_LICENSE_FILES

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 8ca1525a8d1e44766f51b420f7181ca0259c4382)

libssh2: Remove old artifacts from autotools platform

Removed PKG_FIXUP. It has no meaning with CMake.

Replaced PKG_INSTALL with CMAKE_INSTALL. Consequentially, removed
InstallDev section.

Added ABI_VERSION to force package rebuilds when it increases.

Added PKG_BUILD_PARALLEL for faster compilation.

Fixed license tag.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from commit 6a1cd83265209ea882d9b2c71543257273d3d834)

libssh2: Don't build tests

Speeds up build and fixes OpenSSL support.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from commit a447e1c6b2dac374bbd8b84554d994628f897453)

libssh2: update to version 1.9.0 (security fix)

Changes:
Fix CVE-2019-13115
Remove old patches
Switch to cmake

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from commit 9c1a23d9776cd52d5b23c1bcbff8c6ca90cd3b63)

irssi: update to version 1.2.2 (security fix)

Fixes CVE-2019-15717

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from commit b42159dea3ed38c3755c1b641d47209878247763)

sudo: Update to version 1.8.28p1

- Refreshed patches
- Remove inactive maintainer

Fixes: CVE-2019-14287
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 35b215dfff62aac1184c5f3b9e203e4aa191b23f)

rtorrent: Switch to using static libtorrent

rtorrent is the only user of libtorrent. Statically link to save space.

Added usleep patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 358495f1184d005624f7e15fc9990bde1bb7552e)

rtorrent: Update to 0.9.8

Switch to codeload. A lot simpler.

Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 84c92f215d973f18ecb8d832dc8a244a6a7e3f89)

rtorrent: Enable IPv6 support

Other Makefile cleanups as well.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 343e2a07e4ea4cbfad4ff938a931fc2818c530f4)

libtorrent: Switch to static library.

libtorrent is only used by rtorrent. Switch to a static library to save
space.

Removed libsigc++ dependency. It seems it's not needed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from e56fada5a860c12815af7235ed8500c7f446cac4)

libtorrent: Update to 0.13.8

Removed upstreamed patches.

Small change to IPv6 configure flag.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from a328861269737bcbd7d72f5ce8d15e1e49f35ea2)

libtorrent: Enable IPv6 and clean up Makefile

This was not touched since I took maintainership.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 655eed48dcfa1727952ab00f2d2e97e32fd487fe)

libsigcxx: Remove

It's no longer needed with libtorrent. No other package depends on it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from ad758ba286dd19e2004afb065e905461e4868e4a)

gptfdisk: Switch to using uClibc++

Added patches sent upstream to fix usage with uClibc++.

Cleaned up license information.

Added several size optimizations.

Several other Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

netdata: Update to version 1.18.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit bd5207a)

knxd: Makefile cleanups

argp-standalone is only needed for non GLIBC targets.

Added PKG_BUILD_PARALLEL for faster compilation.

Removed unnecessary C/LDFLAGS.

Remove libstdcpp depends. It's included with libfmt.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 5a7ac1d83bd7753798f4f8eb6bff2dc3e27b908a)

espeak: Compile with uClibc++

Several Makefile cleanups.

Added PKG_BUILD_PARALLEL for faster compilation.

Several size optimizations applied.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 21e195f65792caa2323ece7831f84318633de7c4)

libzmq: Remove uClibc++ support

libzmq is used by fbzmq, which absolutely requires libstdcpp since it's a
C++14 project. There's no point in using two libc++.

Cleaned up Makefile for consistency between packages.

Added nanosleep patch for platforms that are missing usleep.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from ad11587c40eccd3c3dd21a0c1a356c4daf0534ce)

Merge pull request #10265 from ewsi/feature_dcwifi_openwrt-19.07

[19.07] dcwifi: Add Dual Channel Wi-Fi component packages

crtmpserver: Switch to CMake and uClibc++

Smaller size.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

dcwifi: Add Dual Channel Wi-Fi component packages

dcstad: Dual Channel Wi-Fi Station Daemon
dcwapd: Dual Channel Wi-Fi Access Point Daemon
libdcwproto: Dual Channel Wi-Fi Protocol Library
libdcwsocket: Dual Channel Wi-Fi Socket Library
macremapper: MAC Address Remapper Linux Kernel Module
mrmctl: Userland tool to get/set remap rules

Signed-off-by: Carey Sonsino <careys@edgewaterwireless.com>
Signed-off-by: Carey Sonsino <csonsino@gmail.com>

Merge pull request #10253 from jefferyto/python-pyasn1-modules-0.2.7-openwrt-19.07

[openwrt-19.07] python-pyasn1-modules: Update to 0.2.7

python-pyasn1-modules: Update to 0.2.7

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 5848f67e41880d995219173bf0098ecb1e95b46a)

Merge pull request #10236 from jefferyto/gammu-fix-lib-symlinks-openwrt-19.07

[openwrt-19.07] gammu: Fix lib symlinks

gammu: Remove python dependency, fix lib symlinks

This removes the python dependency from the package; according to the
maintainer[1][2] the software does not depend on python.

This also fixes the symlinks for libGammu.so and libgsmsd.so.
Previously, the symlinks were overwritten by $(INSTALL_BIN) with copies
of their sources.

[1]: https://github.com/openwrt/packages/issues/8893#issuecomment-539136531
[2]: https://github.com/openwrt/packages/issues/8893#issuecomment-539152794

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 027ed92f6ed4adb1a90d36c2d3429106b326a53b)

gammu: Update to 1.41

Remove upstreamed patch.

Switched conditional dependency to python3 in preparation for deprecating
Python 2.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from 99bbb8af310f058162cbf132f347759fd2267dc3)

Merge pull request #10203 from ynezz/upstream/19.07/cgi-io-backports

[openwrt-19.07] cgi-io backports

shinit: Add package

This package adds support for /etc/shinit and ~/.shinit files, which
contain commands to be run at the start of all interactive shells.
(/etc/profile and ~/.profile are read for login shells only.)

This is useful for those who regularly open non-login, interactive
shells, for example users of GNU Screen or tmux.

(This is based on a patch[1] I submitted for OpenWrt master, but there
does not appear to be much interest in merging the change.)

(This package uses the ENV shell variable, of which the POSIX standard
has a brief description[2]. The dash manpage[3] also describes how the
ENV variable is handled. (dash is the basis for busybox ash.))

[1]: https://patchwork.ozlabs.org/patch/1094493/
[2]: https://pubs.opengroup.org/onlinepubs/9699919799//utilities/V3_chap02.html#tag_18_05_03
[3]: https://manpages.debian.org/buster/dash/dash.1.en.html#Invocation

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from c04dff7965ed84bc57ea957ecad81fb902b7f146)

cgi-io: iron out extra compiler warnings

Fixes following errors:

 main.c:458:37: error: comparison of integer expressions of different signedness: ‘int’ and ‘size_t’ {aka ‘long unsigned int’} [-Werror=sign-compare]
 main.c:463:17: error: comparison of integer expressions of different signedness: ‘int’ and ‘long unsigned int’ [-Werror=sign-compare]
 main.c:518:35: error: comparison of integer expressions of different signedness: ‘ssize_t’ {aka ‘long int’} and ‘size_t’ {aka ‘long unsigned int’} [-Werror=sign-compare]
 main.c:157:3: error: ignoring return value of ‘read’, declared with attribute warn_unused_result [-Werror=unused-result]
 main.c:763:3: error: ignoring return value of ‘chdir’, declared with attribute warn_unused_result [-Werror=unused-result]

Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit bb6cdb804cc4db12cca776f559baa6d989a992ec)

cgi-io: cmake: enable extra compiler warnings

Spotting issues during compilation is cheaper.

Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 4e7411a8d0a46363f9946bff762eda70d5d5de6c)

cgi-io: cmake: fix libraries lookup

In order to make it compile properly in more environments.

Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit fd47e99be4fcd9b1261a4f359279d63199fff6c3)

cgi-io: fix read after end errors

Currently cgi-io try to read data after the data ended.
- Adds "-" to whitelist char
- In main_upload is tried to consume the buffer while it's already readed by the while loop before

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
(cherry picked from commit 535b2b6bd8a7f7a0a7a6914c8091619ea6f8961f)

cgi-io: use splice() to stream backup archive

This improves the I/O performance when outputting large backups.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit a8b4a28372645c93621008b2563c00ce6cdd739f)

cgi-io: pass appropriate HTTP error codes to failure()

Instead of always replying with a generic 500 internal server error code,
use more appropriate codes such as 403 to indicate denied permissions.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 8c22db653158e8c4edf4fdd0e0554a603b96a655)

cgi-io: add download operation

Add a new `cgi-download` applet which allows to retrieve the contents
of regular files or block devices.

In order to initiate a transfer, a POST request in x-www-form-urlencoded
format must be sent to the applet, with one field "sessionid" holding
the login session and another field "path" containing the file path to
download.

Further optional fields are "filename" which - if present - will cause
the download applet to set a Content-Dispostition header and "mimetype"
which allows to let the applet respond with a specific type instead of
the default "application/octet-stream".

Below is an example for the required acl rules to grant download access
to files or block devices:

    ubus call session grant '{
        "ubus_rpc_session": "...",
        "scope": "cgi-io",
        "objects": [
            [ "download", "read" ]
        ]
    }'

    ubus call session grant '{
        "ubus_rpc_session": "...",
        "scope": "file",
        "objects": [
            [ "/etc/config/*", "read" ],
            [ "/dev/mtdblock*", "read" ]
        ]
    }'

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit ab2a2b080d4143bfbbd8584a39999ef998905dd2)

cgi-io: use different acl scopes for path and command permissions

Use the `cgi-io` scope to check for permission to execute the requested
command (`upload`, `backup`) and the `file` scope to check path
permissions.

The reasoning of this change is that `cgi-io` is usually used in
conjunction with `rpcd-mod-file` to transfer large file data out
of band and `rpcd-mod-file` already uses the `file` scope to manage
file path access permissions. After this change, both `rpc-mod-file`
and `cgi-io` can share the same path acl rules.

Write access to a path can be granted by using an ubus call in the
following form:

    ubus call session grant '{
        "ubus_rpc_session": "...",
        "scope": "file",
        "objects": [
            [ "/var/lib/uploads/*", "write" ]
        ]
    }'

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit c8a86c8c8e1925eb7d84c52e702c4be5fc8ac76b)

cgi-io: require whitelisting upload locations

Introduce further ACL checks to verify that the request-supplied
upload location may be written to. This prevents overwriting things
like /bin/busybox and allows to confine uploads to specific directories.

To setup the required ACLs, the following ubus command may be used
on the command line:

ubus call session grant '{
  "ubus_rpc_session": "d41d8cd98f00b204e9800998ecf8427e",
  "scope": "cgi-io",
  "objects": [
    [ "/etc/certificates/*", "write" ],
    [ "/var/uploads/*", "write" ]
  ]
}'

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 22be9a1c0173a232d651059d84145bb6f51d3f67)

Merge pull request #10183 from jefferyto/python-attrs-19.2.0-openwrt-19.07

[openwrt-19.07] python-attrs: Update to 19.2.0

banip: update 0.3.1

* the WAN auto detection now supports multiple interfaces, too
* no longer filter out possible LAN devices
* add a new DoH (DNS over HTTPS) blocklist source with public
  DoH DNS server addresses, to effectively block client side DoH
  communication, e.g. via Firefox or Chrome

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 70ab67649b6a96e7581048ec9c1a7a4debce005d)

banip: update 0.3.0

* new 'ca-bundle' dependency as all https connections
  are now validated by default
* automatically select the download utility: 'aria2', 'curl',
  'uclient-fetch' with libustream-* or wget are supported
* track & ban failed LuCI login attempts as well
* add a small log/banIP background monitor to block
  SSH/LuCI brute force attacks in realtime (disabled by default)
* add a config version check (please update your default config!)
* made the automatic wan detection more stable
* fix the IPv6 logfile parser
* fix the service status message
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit ff8b853a6dc91434a5bae1b58934a6d35472dafc)

net/mosquitto: drop obsolete libuuid dependency

libuuid was dropped as a dependency in mosquitto 1.6.0

Signed-off-by: Karl Palsson <karlp@etactica.com>