vpn-policy-routing: support phys-dev policies

Signed-off-by: Stan Grishin <stangri@melmac.net>

Merge pull request #12078 from micmac1/masneon

neon: add back sed scripts for neon-config

libmicrohttpd: update to 0.9.70

Fix license information.

Cleanup Makefile for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

neon: add back sed scripts for neon-config

Commit 3a67097 removed the sed scripts that ran on neon-config. Now
there is build failure for Asterisk because a host include directory is
added to the build:

mips_24kc_musl/usr/lib/libintl-stub/include    -I/store/buildbot/slave/shared-workdir/build/sdk/staging_dir/target-mips_24kc_musl/usr/include/libxml2  -Wall -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations       -fPIC -DAST_MODULE=\"res_calendar_exchange\" -DAST_MODULE_SELF_SYM=__internal_res_calendar_exchange_self  -I/usr/include/neon -I/store/buildbot/slave/shared-workdir/build/sdk/staging_dir/target-mips_24kc_musl/usr/include -pthread -I/store/buildbot/slave/shared-workdir/build/sdk/staging_dir/target-mips_24kc_musl/usr/include
res_calendar_exchange.c:34:10: fatal error: ne_session.h: No such file or directory
 #include <ne_session.h>
          ^~~~~~~~~~~~~~
compilation terminated.

This commit adds back the sed scripts.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #12036 from micmac1/json-glib

json-glib: new package

Merge pull request #12063 from mstorchak/tmux

tmux: update to 3.1b

Merge pull request #12071 from neheb/yara

yara: update to 4.0.0

Merge pull request #12076 from TDT-AG/pr/20200504-collectd

collectd: add syslog json plugin

collectd: add syslog json plugin

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

tmux: update to 3.1b

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>

acme: Bump acme.sh to v2.8.6

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>

acme: Remove luci-app-acme

The Luci app for ACME has been moved to the luci package feed.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>

keepalived: update PKG_RELEASE number

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

keepalived: add script security param to fix warning

Openwrt is a single user system. So keepalived is runnig as root.
If we add the config options `script_user root` and
`enabled_script_security' the following warnings are gone.

> local1.info Keepalived_vrrp[5382]: SECURITY VIOLATION - scripts are
being executed but script_security not enabled.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

keepalived: move linkbeat_use_polling section into main section

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

keepalived: move alt_config_file check into process_config

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

keepalived: add upgrade script for globals section

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Merge pull request #12039 from lucize/frrref

frr: makefile cleanup and misc fixes

yara: update to 4.0.0

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #12044 from lucize/yangup

libyang: update to 1.0.130

Merge pull request #12069 from stangri/master-vpn-policy-routing

vpn-policy-routing: bugfix: remove non-ASCII from log; update README

Merge pull request #12068 from ClaymorePT/boost_1.73.0

boost: Package Version Update (1.73.0)

Merge pull request #12051 from neheb/tirp

libtirpc: update to 1.2.6

Merge pull request #12061 from cyrozap/prometheus-node-exporter-lua-time

prometheus-node-exporter-lua: Change node_time_seconds type to "gauge"

Merge pull request #12050 from neheb/neon

neon: update to 0.31.1

prometheus-node-exporter-lua: Change node_time_seconds type to "gauge"

The official node_exporter reports node_time_seconds as a gauge, but
prometheus-node-exporter-lua reports it as a counter. To be consistent
with the official implementation, and because "gauge" is more correct
than "counter" for this metric (system time can decrease, but the
Prometheus documentation states, "A counter is a cumulative metric that
represents a single monotonically increasing counter whose value can
only increase or be reset to zero on restart."), change the type for
node_time_seconds to "gauge".

Signed-off-by: Forest Crossman <cyrozap@gmail.com>

Merge pull request #12056 from stangri/master-vpnbypass

vpnbypass: bugfix: remove non-ASCII from system log; update README

vpn-policy-routing: bugfix: remove non-ASCII from log; update README

Signed-off-by: Stan Grishin <stangri@melmac.net>

Merge pull request #12064 from wvdakker/master

Shorewall: Bump to 5.2.4.4

boost: Package Version Update (1.73.0)

This commit updates Boost to version 1.73.0
In this release, there are two new libraries
 - Nowide [2] - Standard library functions with UTF-8 API on Windows,
   from Artyom Beilis.
 - Static String [3] - A dynamically resizable string of characters
   with compile-time fixed capacity and contiguous embedded storage,
   from Vinnie Falco and Krystian Stasiowski.

More info about Boost 1.73.0 can be found at the usual place [1].

[1]: https://www.boost.org/users/history/version_1_73_0.html
[2]: https://www.boost.org/libs/nowide/
[3]: https://www.boost.org/libs/static_string/

Signed-off-by: Carlos Miguel Ferreira <carlosmf.pt@gmail.com>

Merge pull request #12066 from jqqqqqqqqqq/master

fish: update to 3.1.2

fish: update to 3.1.2

Signed-off-by: Curtis Jiang <jqqqqqqqqqq@gmail.com>

Shorewall6: Bump to 5.2.4.4

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall: Bump to 5.2.4.4

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall6-lite: Bump to 5.2.4.4

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall-lite: Bump to 5.2.4.4

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall-core: Bump to 5.2.4.4

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

frr: makefile cleanup and misc fixes

fix mips runtime by backporting some yang changes from master
added commited fixes to 7.3
also add option for snmp support

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

vpnbypass: bugfix: remove non-ASCII from system log; update README

Signed-off-by: Stan Grishin <stangri@melmac.net>

Merge pull request #12053 from neheb/lo

liblo: update to 0.31

Merge pull request #12047 from jekkos/do-ddns-v2

ddns-scripts: Add digitalocean as DDNS provider

ddns-scripts: Add digitalocean as DDNS provider

Signed-off-by: Jeroen Peelaerts <jeroen.peelaerts@gmail.com>

liblo: update to 0.31

Refreshed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libtirpc: update to 1.2.6

Add HOST_BUILD_PARALLEL for faster compilation.

Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

neon: update to 0.31.1

Upstream changed.

Add license information.

Add PKG_BUILD_PARALLEL for faster compilation.

Remove several outdated options.

Refreshed OpenSSL patch.

Other small cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #12042 from neheb/yaml

libyaml: update to 0.2.4

Merge pull request #12040 from neheb/mess

meson: update to 0.54.1

Merge pull request #12045 from peter-stadler/pytz

python-pytz: update version to 2020.1

libyang: update to 1.0.130

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

python-pytz: update version to 2020.1

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>

json-glib: new package

From upstream description:

JSON-GLib is a library providing serialization and deserialization
support for the JavaScript Object Notation (JSON) format described by
RFC 4627.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

libyaml: update to 0.2.4

Signed-off-by: Rosen Penev <rosenp@gmail.com>

meson: update to 0.54.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>

vala: update to 0.48.5

Signed-off-by: Rosen Penev <rosenp@gmail.com>

idevicerestore: update to 2020-04-20

Signed-off-by: Rosen Penev <rosenp@gmail.com>

bind: update to version (security fix)

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

ocserv: updated to 1.0.1

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

openconnect: updated to 8.09

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

Merge pull request #12034 from micmac1/gperf

Revert gperf: remove

Merge pull request #12013 from neheb/moc

mocp: disable ffmpeg

Merge pull request #12019 from cotequeiroz/jamvm_host

jamvm: remove unneeded host build, and the package itself

Merge pull request #12026 from jefferyto/python-dns-pypi

python-dns: Change download source, remove incorrect PKG_CPE_ID

jamvm: remove package

Java support is no longer feasible in openwrt.  It's outdated, and can't
be usd without classpath, which has been removed.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

Merge pull request #11798 from GuLinux/patch-1

openconnect: Allow to set `usergroup` option

Revert gperf: remove

gperf is a basic tool used when building packages. It's not available on
all hosts, in which case having a host package like this one is
required. For instance the CircleCI environment does not contain gperf,
in which case building of software requiring gperf fails.

This commit reverts the gperf removal.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #12028 from jefferyto/python-schema-0.7.2

python-schema: Update to 0.7.2, change download source to PyPI

Merge pull request #12027 from jefferyto/python-decorator-4.4.2

python-decorator: Update to 4.4.2, change download source to PyPI

Merge pull request #12029 from jefferyto/django-simple-captcha-pypi

django-simple-captcha: Change download source to PyPI

django-simple-captcha: Change download source to PyPI

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-schema: Update to 0.7.2, change download source to PyPI

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-decorator: Update to 4.4.2, change download source to PyPI

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-dns: Change download source, remove incorrect PKG_CPE_ID

This changes the package to download from PyPI (using pypi.mk) and
removes the incorrect PKG_CPE_ID.

The CPE id was for Debian's python-dns package which contains PyDNS
("pydns" on PyPI). This package contains "dnspython" from PyPI.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Merge pull request #12025 from dl12345/snort

snort: bump to 2.9.15.1

snort: bump to 2.9.15.1

Fix compilation error with x86_64 glibc

Fix changed download location on snort.org

Signed-off-by: Ian Cooper <iancooper@hotmail.com>

Merge pull request #12021 from eglooca/master

netifyd: Updated to v3.00

Merge pull request #11880 from pesintta/acme-user-scripts

(u)acme: add support for user-provided setup and cleanup scripts

uacme: add support for user-provided setup and cleanup scripts

Add possibility for user to provide setup and cleanup scripts for
additional flexibility. Setup-script takes precedence over the built-in
behavior of uacme.

This helps users with more complex use-cases to utilize uacme to update
certificates without adding complexity to the provided run.sh script.

Signed-off-by: Antti Seppälä <a.seppala@gmail.com>

acme: add support for user-provided setup and cleanup scripts

Add possibility for user to provide setup and cleanup scripts for
additional flexibility. Setup-script takes precedence over the built-in
behavior of acme.

This helps users with more complex use-cases to utilize acme to update
certificates without adding complexity to the provided run.sh script.

Signed-off-by: Antti Seppälä <a.seppala@gmail.com>

netifyd: Updated to v3.00

Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>

jamvm: remove unneeded host build

Host build was added in 2972cc98e ("Add host build") because classpath
required a host java vm.  Now that classpath is gone, host build can be
removed as well.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

mwan3: Update Makefile

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>

mwan3: Don't use /128 address for ping source

An interface can have both a /64 and a /128 from a provider.

In such a case, use the address from the /64 to do the ping check, not
the /128.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>

Merge pull request #11979 from neheb/jan

jsoncpp: add size optimizations

Merge pull request #12010 from dl12345/dovecot

dovecot: remove incorrect PKG_BUILD_DEPENDS

mocp: disable ffmpeg

The recent update to ffmpeg broke this.

Instead, use the relevant libraries separately.

Added AAC support. AAC is very common and was recently fixed to be
compatible with BUILD_PATENTED.

Explicitly pass all configure arguments, to avoid future breakage.

Remove autoreconf. autotools files are not being patched.

Add PKG_BUILD_PARALLEL for speed.

Other minor cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

dovecot: remove incorrect PKG_BUILD_DEPENDS

The package Makefile contains a PKG_BUILD_DEPENDS=libiconv
line, which apart from being incorrect if libiconv-full is
specified in the build configuration, is also unnecessary,
since the package Makefile already includes nls.mk which
sets PKG_BUILD_DEPENDS appropriately.

Signed-off-by: Ian Cooper <iancooper@hotmail.com>

Merge pull request #11998 from jefferyto/uwsgi-pypi

uwsgi: Use pypi.mk to download source tarball

openconnect: Allow to set `usergroup` option in OpenConnect

Just adding the extra option `-g|--usergroup <group>` (required by the VPN server I'm currently using)

Signed-off-by: Marco Gulino <marco@gulinux.net>

switchdev-poller: netifd now keep dev down

Since 19.07, netifd will not try to bring a device up
after someone brought it down. This way, there is no need
to rename the device.

It also fixes a rename error on 19.07 when the *_down device
was being in use (by netifd?).

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>

Merge pull request #11997 from jefferyto/scapy-python-package

scapy: Use Python packaging, PyPI download

Merge pull request #12006 from TELUS-BBA/coreutils-fix

coreutils: add upstream patch fixing aarch64 compilation

coreutils: add upstream patch fixing aarch64 compilation

ls: restore 8.31 behavior on removed directories

Signed-off-by: Scott Roberts <ttocsr@gmail.com>

Merge pull request #12003 from jefferyto/python-cryptography-2.9.2

python-cryptography: Update to 2.9.2

Merge pull request #12001 from jefferyto/radicale2-cleanup

radicale2: Clean up Makefile

Merge pull request #12005 from dl12345/master-perl

perl: fix compilation on x86_64 with glibc and ssp

Merge pull request #12002 from dl12345/master

procps-ng: remove unnecessary PKG_BUILD_DEPENDS

travelmate: fix captive portal detection

* made captive portal detection more bullet proof, fixes #11990

Signed-off-by: Dirk Brenken <dev@brenken.org>

perl: fix compilation on x86_64 with glibc and ssp

perl fails to compile on x86_64 with glibc and stack smashing
protection enabled due to libssp not being specified in the
ldflags.

Signed-off-by: Ian Cooper <iancooper@hotmail.com>

python-cryptography: Update to 2.9.2

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

procps-ng: remove unnecessary PKG_BUILD_DEPENDS

The package Makefile contains an unnecessary PKG_BUILD_DEPENDS
line that builds gettext and libiconv even in cases where the
build has gettext-full and libiconv-full selected.

This behaviour can and does mask errors in other package Makefiles
that are dependent on libiconv-full if it is compiled before
these packages by causing libiconv-stub to be created and put in
the staging tree and potentially linked against by these
dependent packages when they omit to specify an appropriate
PKG_BUILD_DEPENDS line.

procps-ng does not require gettext or libiconv to be built in
order to compile correctly.

Signed-off-by: Ian Cooper <iancooper@hotmail.com>