Jo-Philipp Wich [Fri, 13 Sep 2019 07:17:58 +0000 (09:17 +0200)]
cgi-io: use splice() to stream backup archive
This improves the I/O performance when outputting large backups.
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Jo-Philipp Wich [Fri, 13 Sep 2019 06:32:58 +0000 (08:32 +0200)]
cgi-io: pass appropriate HTTP error codes to failure()
Instead of always replying with a generic 500 internal server error code,
use more appropriate codes such as 403 to indicate denied permissions.
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Jo-Philipp Wich [Fri, 13 Sep 2019 05:23:25 +0000 (07:23 +0200)]
cgi-io: add download operation
Add a new `cgi-download` applet which allows to retrieve the contents
of regular files or block devices.
In order to initiate a transfer, a POST request in x-www-form-urlencoded
format must be sent to the applet, with one field "sessionid" holding
the login session and another field "path" containing the file path to
download.
Further optional fields are "filename" which - if present - will cause
the download applet to set a Content-Dispostition header and "mimetype"
which allows to let the applet respond with a specific type instead of
the default "application/octet-stream".
Below is an example for the required acl rules to grant download access
to files or block devices:
ubus call session grant '{
"ubus_rpc_session": "...",
"scope": "cgi-io",
"objects": [
[ "download", "read" ]
]
}'
ubus call session grant '{
"ubus_rpc_session": "...",
"scope": "file",
"objects": [
[ "/etc/config/*", "read" ],
[ "/dev/mtdblock*", "read" ]
]
}'
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Jo-Philipp Wich [Fri, 13 Sep 2019 04:52:21 +0000 (06:52 +0200)]
cgi-io: use different acl scopes for path and command permissions
Use the `cgi-io` scope to check for permission to execute the requested
command (`upload`, `backup`) and the `file` scope to check path
permissions.
The reasoning of this change is that `cgi-io` is usually used in
conjunction with `rpcd-mod-file` to transfer large file data out
of band and `rpcd-mod-file` already uses the `file` scope to manage
file path access permissions. After this change, both `rpc-mod-file`
and `cgi-io` can share the same path acl rules.
Write access to a path can be granted by using an ubus call in the
following form:
ubus call session grant '{
"ubus_rpc_session": "...",
"scope": "file",
"objects": [
[ "/var/lib/uploads/*", "write" ]
]
}'
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Rosen Penev [Fri, 13 Sep 2019 08:55:09 +0000 (01:55 -0700)]
Merge pull request #9963 from neheb/gd4
libgd: Switch to CMake
Rosen Penev [Fri, 13 Sep 2019 07:18:29 +0000 (00:18 -0700)]
Merge pull request #9979 from commodo/seahub-mysqlclient
seafile-seahub: update dependency to python-mysqlclient
Alexandru Ardelean [Fri, 13 Sep 2019 09:27:22 +0000 (12:27 +0300)]
seafile-seahub: update dependency to python-mysqlclient
The `python-mysql` package was updated with PR https://github.com/openwrt/packages/pull/9705
For seahub this was omitted, since the Python dependencies are prefixed
with `python-`, so it was missed during the grep search.
And grepping just for `mysql` yields many results.
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
Rosen Penev [Fri, 13 Sep 2019 02:29:00 +0000 (19:29 -0700)]
libftdi1: Don't build examples
Add PKG_BUILD_PARALLEL for faster compilation.
Replace InstallDev section with CMAKE_INSTALL
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Rosen Penev [Fri, 13 Sep 2019 02:02:17 +0000 (19:02 -0700)]
liblo: disable tests and enable IPv6
Speeds up compilation.
Also fixed compilation without deprecated POSIX APIs.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Paul Tobias [Mon, 26 Aug 2019 11:44:50 +0000 (18:44 +0700)]
ddns-scripts: Use https for domains.google.com
Without https the update fails with:
```
132954 : #> /usr/bin/curl -RsS -o /var/run/ddns/myddns_ipv4.dat --stderr /var/run/ddns/myddns_ipv4.err --noproxy '*' 'http://CENSORED:***PW***@domains.google.com/nic/update?hostname=CENSORED&myip=CENSORED'
132954 : DDNS Provider answered:
<HTML>
<HEAD>
<TITLE>Moved Temporarily</TITLE>
</HEAD>
<BODY BGCOLOR="#FFFFFF" TEXT="#000000">
<H1>Moved Temporarily</H1>
The document has moved <A HREF="https://domains.google.com/nic/update?hostname=CENSORED&myip=CENSORED">here</A>.
</BODY>
</HTML>
132954 ERROR : IP update not accepted by DDNS Provider
```
Signed-off-by: Paul Tobias <tobias.pal@gmail.com>
Rosen Penev [Thu, 12 Sep 2019 22:16:18 +0000 (15:16 -0700)]
Merge pull request #9690 from neheb/snmp
smartsnmpd: Update to 2015-02-22 version
Rosen Penev [Sun, 11 Aug 2019 00:12:40 +0000 (17:12 -0700)]
smartsnmpd: Update to 2015-02-22 version
Ran through 2to3 to get it to compile.
Ran init script through shellcheck. Grouped several file writes.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Rosen Penev [Tue, 10 Sep 2019 20:49:21 +0000 (13:49 -0700)]
libgd: Switch to CMake
Size reduced from 92878 to 91675 bytes.
CMake added CXX files. Removed those.
Removed ceill patch. ceill is not used anymore.
Removed pkgconfig patch. CMake uses a different file, which does not have
this problem.
Further size reduction to 87938 with LTO.
Removed InstallDev. CMAKE_INSTALL takes care of that.
Added WebP support.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Rosen Penev [Thu, 12 Sep 2019 21:47:57 +0000 (14:47 -0700)]
libwebp: Fix InstallDev typo again
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Rosen Penev [Thu, 12 Sep 2019 21:37:40 +0000 (14:37 -0700)]
libwebp: Fix typo with InstallDev section
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Rosen Penev [Thu, 12 Sep 2019 21:33:14 +0000 (14:33 -0700)]
libfolly: Pass -DBoost_NO_BOOST_CMAKE
It seems the new CMake update broke boost again.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Rosen Penev [Thu, 12 Sep 2019 21:30:23 +0000 (14:30 -0700)]
Merge pull request #9946 from neheb/unr
unrar: Update to 5.8.1
Rosen Penev [Thu, 12 Sep 2019 21:24:13 +0000 (14:24 -0700)]
Merge pull request #9962 from mhei/pecl-mcrypt-license
php7-pecl-mcrypt: update PKG_LICENSE
Rosen Penev [Thu, 12 Sep 2019 21:23:58 +0000 (14:23 -0700)]
Merge pull request #9961 from mhei/pecl-krb5-license
php7-pecl-krb5: fix PKG_LICENSE tag
Rosen Penev [Thu, 12 Sep 2019 21:23:24 +0000 (14:23 -0700)]
Merge pull request #9945 from neheb/gc
libgcrypt: Update to 1.8.5
Rosen Penev [Thu, 12 Sep 2019 21:21:08 +0000 (14:21 -0700)]
Merge pull request #9964 from neheb/webp
libwebp: Add new package
Rosen Penev [Thu, 12 Sep 2019 21:20:04 +0000 (14:20 -0700)]
Merge pull request #9937 from mwarning/zerotier
zerotier: license change and make sure path exists
Rosen Penev [Thu, 12 Sep 2019 21:19:02 +0000 (14:19 -0700)]
Merge pull request #9924 from neheb/val
vala: Update to 0.46.0
Rosen Penev [Mon, 9 Sep 2019 07:26:45 +0000 (00:26 -0700)]
libgcrypt: Update to 1.8.5
Fixed up license information. Only the library is packaged.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Rosen Penev [Thu, 12 Sep 2019 21:07:49 +0000 (14:07 -0700)]
Merge pull request #9973 from wfleurant/ygg-builder-hotfix-002
yggdrasil: fix #9960 re: vendor fix
Rosen Penev [Thu, 12 Sep 2019 21:07:22 +0000 (14:07 -0700)]
Merge pull request #9976 from neheb/gee
libgee: Update to 0.20.2
Michael Heimpold [Thu, 12 Sep 2019 20:26:20 +0000 (22:26 +0200)]
mmc-utils: update to latest git head
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
Rosen Penev [Thu, 12 Sep 2019 20:18:36 +0000 (13:18 -0700)]
libgee: Update to 0.20.2
Eliminate patch in favor of configure argument.
Shuffled some stuff around for consistency between packages.
Added PKG_BUILD_PARALLEL for faster compilation.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
William Fleurant [Thu, 12 Sep 2019 18:28:02 +0000 (14:28 -0400)]
yggdrasil: fix #9960 re: vendor fix
Signed-off-by: William Fleurant <meshnet@protonmail.com>
Rosen Penev [Thu, 12 Sep 2019 15:53:27 +0000 (08:53 -0700)]
Merge pull request #9705 from commodo/python-mysqlclient
python-mysql[client]: rename to python-mysqlclient & bump to version 1.4.4
Josef Schlehofer [Wed, 11 Sep 2019 22:20:11 +0000 (00:20 +0200)]
btrfs-progs: Update to version 5.2.2
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Rosen Penev [Thu, 12 Sep 2019 05:48:40 +0000 (22:48 -0700)]
Merge pull request #9952 from neheb/rt
rtorrent: Switch to static linking
Yousong Zhou [Tue, 27 Aug 2019 03:42:34 +0000 (03:42 +0000)]
cgroups-mount,docker-ce,lxc: rework kernel feature dependency
Fix that KERNEL_CGROUPS is enabled (selected) automatically along with
cgroups-mount
Replace "if PACKAGE_docker-ce" with a menu to avoid circular denpendency
issue involving PACKAGE_docker-ce, PACKAGE_cgroups-mount and
KERNEL_CGRUOPS
docker-ce, lxc: replace KERNEL_LXC_MISC with more specific options
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Daniel Engberg [Wed, 11 Sep 2019 22:21:41 +0000 (00:21 +0200)]
Merge pull request #9967 from BKPepe/ytdl
youtube-dl: Update to version 2019.9.12.1
Josef Schlehofer [Wed, 11 Sep 2019 21:52:17 +0000 (23:52 +0200)]
youtube-dl: Update to version 2019.9.12.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Rosen Penev [Wed, 11 Sep 2019 00:42:58 +0000 (17:42 -0700)]
libwebp: Add new package
Requested by: https://github.com/openwrt/packages/issues/9740
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Rosen Penev [Tue, 10 Sep 2019 19:58:23 +0000 (12:58 -0700)]
Merge pull request #9838 from ClaymorePT/boost_1.71.0_r1
boost: Package Version Update (1.71.0) + bugfixes
Michael Heimpold [Sun, 8 Sep 2019 21:17:29 +0000 (23:17 +0200)]
php7-pecl-mcrypt: update PKG_LICENSE
Update license tag to latest SPDX format.
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
Michael Heimpold [Sun, 8 Sep 2019 21:09:09 +0000 (23:09 +0200)]
php7-pecl-krb5: fix PKG_LICENSE tag
According to the included license file in the package,
the license is MIT not BSD, so fix it.
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
Dirk Brenken [Tue, 10 Sep 2019 17:48:55 +0000 (19:48 +0200)]
Merge pull request #9959 from dibdot/banIP
banip: update 0.2.1
Dirk Brenken [Tue, 10 Sep 2019 17:34:49 +0000 (19:34 +0200)]
banip: update 0.2.1
* fix for #9954
Signed-off-by: Dirk Brenken <dev@brenken.org>
Rosen Penev [Tue, 10 Sep 2019 17:25:15 +0000 (10:25 -0700)]
Merge pull request #9906 from ecsv/gpl-or-later-spdx-identifier
treewide: Change .*GPL.*+ licenses to SPDX compatible identifier
Rosen Penev [Tue, 10 Sep 2019 16:51:19 +0000 (09:51 -0700)]
Merge pull request #9957 from BKPepe/dovecot
dovecot: Update to version 2.3.7.2
Carlos Miguel Ferreira [Mon, 26 Aug 2019 22:39:24 +0000 (23:39 +0100)]
boost: Package Version Update (1.71.0) + bugfixes
This commit updates Boost to version 1.71.0 and disables Boost.Context
for arc and mips64 architectures, since either jump_fcontext or
getcontext are undefined for those architectures.
It also fixes a bug were Boost.Fiber was not properly disabled for
mips32 and mips64 architectures.
Boost.Coroutine2 option was removed since it was redundant. By selecting
the Coroutine package, Coroutine2 is also installed.
Boost.Fiber has been disabled for target brcm47xx_generic and brcm47xx_legacy
due to misssing opcode support from instruction set.
Boost 1.71.0 brings a new header-only library
- Boost.Variant2 [1]
-> A never-valueless, strong guarantee implementation of
std::variant, from Peter Dimov.
More info about Boost 1.71.0 can be found at the usual place [2].
[1]: https://www.boost.org/doc/libs/1_71_0/libs/variant2/doc/html/variant2.html
[2]: https://www.boost.org/users/history/version_1_71_0.html
Signed-off-by: Carlos Miguel Ferreira <carlosmf.pt@gmail.com>
Josef Schlehofer [Sun, 8 Sep 2019 21:57:37 +0000 (23:57 +0200)]
dovecot: Update to version 2.3.7.2
Fix CVE-2019-11500
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Sven Eckelmann [Mon, 2 Sep 2019 13:15:08 +0000 (15:15 +0200)]
treewide: Change .*GPL.*+ licenses to SPDX compatible identifier
The CONTRIBUTING.md requests an (or multiple) SPDX identifier for GPL
licenses. But a lot of packages did use a different, non-SPDX style with a
"+" at the end instead of "-or-later".
Signed-off-by: Sven Eckelmann <sven@narfation.org>
Rosen Penev [Tue, 10 Sep 2019 05:20:05 +0000 (22:20 -0700)]
Merge pull request #9947 from eglooca/master
netifyd: Updated to v2.92.
Rosen Penev [Tue, 10 Sep 2019 05:13:39 +0000 (22:13 -0700)]
Merge pull request #9956 from neheb/wan
libwangle: Update to 2019.09.02
Rosen Penev [Mon, 12 Aug 2019 04:44:07 +0000 (21:44 -0700)]
libwangle: Update to 2019.09.02
Several size optimizations. Savings of ~68KB.
Remove shared build. libwangle is only used by fbthrift. Just use the
static version.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Rosen Penev [Mon, 9 Sep 2019 22:51:23 +0000 (15:51 -0700)]
Merge pull request #9950 from neheb/fizz
libfizz: Update to 2019.09.09.00
Rosen Penev [Mon, 9 Sep 2019 22:16:08 +0000 (15:16 -0700)]
rtorrent: Switch to using static libtorrent
rtorrent is the only user of libtorrent. Statically link to save space.
Added usleep patch.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Rosen Penev [Mon, 9 Sep 2019 22:00:42 +0000 (15:00 -0700)]
libtorrent: Switch to static library.
libtorrent is only used by rtorrent. Switch to a static library to save
space.
Removed libsigc++ dependency. It seems it's not needed.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Rosen Penev [Mon, 9 Sep 2019 21:58:53 +0000 (14:58 -0700)]
libsigcxx: Remove
It's no longer needed with libtorrent. No other package depends on it.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Rosen Penev [Mon, 12 Aug 2019 02:53:10 +0000 (19:53 -0700)]
libfizz: Update to 2019.09.09.00
Several size optimizations. ~76KB savings.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Dirk Brenken [Mon, 9 Sep 2019 19:25:25 +0000 (21:25 +0200)]
Merge pull request #9948 from dibdot/banIP
banip: update 0.2.0
Rosen Penev [Mon, 9 Sep 2019 19:21:49 +0000 (12:21 -0700)]
Merge pull request #9949 from neheb/folly
libfolly: Update to 2019.09.02
Dirk Brenken [Mon, 9 Sep 2019 15:12:52 +0000 (17:12 +0200)]
banip: update 0.2.0
* remove 'http-only' mode, all sources are now fetched from https sites
* the backup mode is now mandatory ('/tmp' is the default backup
directory), always create and re-use backups if available.
To force a re-download take the 'reload' action.
* support 'sshd' in addition to 'dropbear' for logfile parsing
to detect break-in events
* always update the black-/whitelist with logfile parsing results
in 'refresh' mode (no new downloads)
* rework the return code handling
* tweak procd trigger
* various small fixes
* (s)hellsheck cosmetics
Signed-off-by: Dirk Brenken <dev@brenken.org>
Rosen Penev [Mon, 12 Aug 2019 02:30:43 +0000 (19:30 -0700)]
libfolly: Update to 2019.09.02
Several optimizations to reduce size. ~35KB. Mostly because of LTO.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Darryl Sokoloski [Mon, 9 Sep 2019 14:22:32 +0000 (10:22 -0400)]
netifyd: Updated to v2.92.
Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>
Rosen Penev [Mon, 9 Sep 2019 08:36:15 +0000 (01:36 -0700)]
unrar: Update to 5.8.1
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Yousong Zhou [Mon, 9 Sep 2019 03:05:15 +0000 (03:05 +0000)]
acme: depends on gnu-wget
Fixes openwrt/packages#9456
Ref: https://github.com/openwrt/packages/issues/9456
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Yousong Zhou [Mon, 9 Sep 2019 02:59:50 +0000 (02:59 +0000)]
wget: provides gnu-wget
So that packages like acme requiring features from it can depend on it
explicitly, not the more basic "wget" which is also provided by
"uclient-fetch"
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Sebastian Kemper [Sun, 8 Sep 2019 09:59:00 +0000 (11:59 +0200)]
glib2: don't use libelf during host build
Since commit
d3f86c9cc3e465fbca51aaadbb274856831ba56c tools/libelf
installs a pkgconfig file, which in turn is picked up during the glib2
host build. On the build bots the same occurs, although it so happens
that (sometimes?) libelf.h is not found and the host build fails. This
may be a timing issue specific to the build bots, as the header is in
fact installed by tools/libelf and I can't reproduce this here on my own
computer.
In any case, libelf (if detected) is only used by gresource. gresource
can be used without it. gresource is not used by OpenWrt's build system
(also not in openwrt/packages). So adding "--disable-libelf" to the host
configure args is not detrimental in any way and works around the issue
described above.
Resolves #9927
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
Moritz Warning [Sun, 8 Sep 2019 15:18:47 +0000 (17:18 +0200)]
zerotier: make sure the /var/lib exists
Signed-off-by: Moritz Warning <moritzwarning@web.de>
Moritz Warning [Sun, 8 Sep 2019 15:17:55 +0000 (17:17 +0200)]
zerotier: change license to BSL 1.1
Business Source License.
Signed-off-by: Moritz Warning <moritzwarning@web.de>
Rosen Penev [Sun, 8 Sep 2019 21:53:44 +0000 (14:53 -0700)]
Revert "libmstch: Remove boost dependency"
This reverts commit
cb78291982b7fe615a28132f6d8d2c927ad5ae28.
The buildbots have GCC6. GCC7 is needed for C++17.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Michael Heimpold [Sun, 8 Sep 2019 21:03:46 +0000 (23:03 +0200)]
php7-pecl-libevent: update to latest commit
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
Michael Heimpold [Sun, 8 Sep 2019 21:01:18 +0000 (23:01 +0200)]
php7-pecl-redis: update to 5.0.2
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
Michael Heimpold [Sun, 8 Sep 2019 21:00:38 +0000 (23:00 +0200)]
php7-pecl-http: update to 3.2.1
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
Michael Heimpold [Sun, 8 Sep 2019 19:30:31 +0000 (21:30 +0200)]
php7-pecl-dio: update SPDX id to most recent format
Also the source package contains a LICENSE file, so
we can refer to it.
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
Michael Heimpold [Sun, 8 Sep 2019 19:27:18 +0000 (21:27 +0200)]
php7: update to 7.2.22
While at, update the SPDX license id to most recent format.
Compile and run tested on mxs platform.
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
Rosen Penev [Sat, 7 Sep 2019 02:59:58 +0000 (19:59 -0700)]
Merge pull request #9930 from lucize/nssup
nss: update to 3.46
Rosen Penev [Sat, 7 Sep 2019 02:51:05 +0000 (19:51 -0700)]
softethervpn: Fix openssl header patch
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Dirk Brenken [Fri, 6 Sep 2019 18:53:58 +0000 (20:53 +0200)]
Merge pull request #9929 from dibdot/adblock
adblock: update 3.8.5
Rosen Penev [Fri, 6 Sep 2019 18:19:46 +0000 (11:19 -0700)]
Merge pull request #9931 from sebastian-de/ipfix
ulogd2: Build IPFIX module
Rosen Penev [Tue, 3 Sep 2019 04:45:45 +0000 (21:45 -0700)]
pulseaudio: Add glib2/host dependency
This was implicit with glib2 but got removed with
170ef79393aabc7cfbe3cd4625dc01f0fcc25221
Fixed license tag to newer SPDX.
Removed PKG_BUILD_DIR as that is now default with upstream's
e545fac8d968864a965edb9e50c6f90940b0a6c9
Minor reorganization for consistency.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Rosen Penev [Fri, 6 Sep 2019 17:18:05 +0000 (10:18 -0700)]
lcdgrilo: Depend on vala/host instead
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Rosen Penev [Fri, 6 Sep 2019 17:17:14 +0000 (10:17 -0700)]
lcdringer: Depend on vala/host instead
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Sebastian Fleer [Fri, 6 Sep 2019 16:35:51 +0000 (18:35 +0200)]
ulogd2: Build IPFIX module
add ulogd_output_IPFIX.so to ulogd-mod-extra
Signed-off-by: Sebastian Fleer <dev@dwurp.de>
Lucian Cristian [Fri, 6 Sep 2019 15:53:15 +0000 (18:53 +0300)]
nss: update to 3.46
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
Dirk Brenken [Fri, 6 Sep 2019 08:18:05 +0000 (10:18 +0200)]
adblock: update 3.8.5
* use raw procd interface trigger as last resort, if the
adblock config is not available during startup
* fix selective subdomain whitelisting for dnsmasq
* fix a kresd restart issue with 'DNS File Reset'
* fix a suspend/resume cornercase
* disable the tld compression, if the number of blocked domains
is greater than 'adb_maxtld' (default: 100000)
* made the fw portlist configurable (default '53 853 5353')
* preliminary support for inotify-like autoload features
of dns backends like kresd in future Turris OS. If 'adb_dnsinotify'
is set to 'true', all adblock related restarts and the
'DNS File Reset' will be disabled
Signed-off-by: Dirk Brenken <dev@brenken.org>
Rosen Penev [Thu, 5 Sep 2019 22:02:11 +0000 (15:02 -0700)]
vala: Update to 0.46.0
Switched to using the configure script instead of using make directly.
Added HOST__BUILD_PARALLEL for faster compilation.
Removed target build. It's completely unused.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Xingwang Liao [Fri, 6 Sep 2019 03:00:58 +0000 (11:00 +0800)]
golang: Update to 1.13
Signed-off-by: Xingwang Liao <kuoruan@gmail.com>
Rosen Penev [Thu, 5 Sep 2019 20:40:15 +0000 (13:40 -0700)]
Merge pull request #9922 from neheb/ul
ulogd2: Backport upstream patches
Rosen Penev [Wed, 4 Sep 2019 23:36:04 +0000 (16:36 -0700)]
ulogd2: Backport upstream patches
IPFIX support was requested.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Josef Schlehofer [Thu, 5 Sep 2019 10:58:38 +0000 (12:58 +0200)]
Merge pull request #9891 from BKPepe/lighttpd
lighttpd: Update to version 1.4.54
Rosen Penev [Wed, 4 Sep 2019 22:17:43 +0000 (15:17 -0700)]
Merge pull request #9920 from PolynomialDivision/fix/libuwifi_devinstall
libuwifi: fix dev installation
Nick Hainke [Wed, 4 Sep 2019 15:41:27 +0000 (17:41 +0200)]
libuwifi: fix dev installation
The ccan needs config.h file. This commit fixes the includes
and copies the config.h file to the correct position.
Signed-off-by: Nick Hainke <vincent@systemli.org>
Matthias Schiffer [Wed, 4 Sep 2019 20:49:12 +0000 (22:49 +0200)]
fastd: fix init script for multiple VPN instances
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
Josef Schlehofer [Wed, 4 Sep 2019 17:36:02 +0000 (19:36 +0200)]
Merge pull request #9919 from ja-pa/samba4-security-fix
samba4: update to version 4.9.13 (security fix)
Jan Pavlinec [Wed, 4 Sep 2019 10:58:06 +0000 (12:58 +0200)]
samba4: update to version 4.9.13 (security fix)
Fixes CVE-2019-10197
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
Oever González [Sun, 1 Sep 2019 05:02:04 +0000 (23:02 -0600)]
samba4: remove double quotes for renice
The double quote thells the shell that the list returned from `pidof` is a
single argument, therefore, `renice` will cry about a malformed input.
With this commit, `renice` will be applied correctly to all the returned PIDs
from `pidof`.
The output of `renice` for the quoted list is as follows:
`renice: invalid number '6592 6587 6586 6574'`
`renice` does not show and does apply the nice value if the list is unquoted.
Signed-off-by: Oever González <notengobattery@gmail.com>
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
Rosen Penev [Wed, 4 Sep 2019 07:13:25 +0000 (00:13 -0700)]
Merge pull request #9845 from ja-pa/fix-aslr-pie
Disable ASLR PIE in selected packages
Jan Pavlinec [Tue, 27 Aug 2019 11:21:33 +0000 (13:21 +0200)]
usbip: disable ASLR PIE
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
Rosen Penev [Wed, 4 Sep 2019 00:13:41 +0000 (17:13 -0700)]
Merge pull request #9917 from neheb/msm3
libmstch: Remove boost dependency
Rosen Penev [Tue, 3 Sep 2019 23:10:22 +0000 (16:10 -0700)]
libmstch: Remove boost dependency
Added patches that convert Boost functionality to C++17.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Hannu Nyman [Tue, 3 Sep 2019 20:15:18 +0000 (23:15 +0300)]
Merge pull request #9915 from ejurgensen/forked-daapd_upgrade_265
forked-daapd: update to 26.5
Rosen Penev [Sun, 11 Aug 2019 23:21:51 +0000 (16:21 -0700)]
softethervpn: Add missing OpenSSL header
Fixes compilation without OpenSSL deprecated APIs as well as
-Werror=implicit-function-declaration.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Rosen Penev [Thu, 15 Aug 2019 17:39:07 +0000 (10:39 -0700)]
libdouble-conversion: Size optimizations
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Rosen Penev [Thu, 15 Aug 2019 17:43:33 +0000 (10:43 -0700)]
bonnie++: Size optimizations
Signed-off-by: Rosen Penev <rosenp@gmail.com>