aboutsummaryrefslogtreecommitdiffstats
path: root/package
Commit message (Collapse)AuthorAgeFilesLines
...
* dropbear: make ssh compression support configurableMarcin Jurkowski2017-12-132-3/+13
| | | | | | | | | | Adds config option to enable compression support which is usefull when using a terminal sessions over a slow link. Impact on binary size is negligible but additional 60 kB (uncompressed) is needed for a shared zlib library. Signed-off-by: Marcin Jurkowski <marcin1j@gmail.com> (cherry picked from commit a816e1eac761bfdac720d00d15feb18b7b9fd1e3)
* procd: Install seccomp-trace symlinkMichal Sojka2017-12-131-0/+1
| | | | | Signed-off-by: Michal Sojka <sojkam1@fel.cvut.cz> (cherry picked from commit 1a5bf778fb4f8b648716d9f8275c6a0af503cfe5)
* openvpn: update to 2.4.4Magnus Kroken2017-12-132-34/+58
| | | | | | | | | | Fixes CVE-2017-12166: out of bounds write in key-method 1. Remove the mirror that was temporarily added during the 2.4.3 release. Signed-off-by: Magnus Kroken <mkroken@gmail.com> (cherry picked from commit a9a37526a9df3b565f5242857d17887cb492afab)
* usbutils: avoid duplicating the git revisionPhilip Prindeville2017-12-131-1/+1
| | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com> (cherry picked from commit 3008fc9a7bbdcbb2563c99178ce8085396dd41e6)
* dnsmasq: Pass TARGET_CPPFLAGS to MakefileFlorian Fainelli2017-12-131-1/+1
| | | | | | | | | | With the introduction of the ubus notifications, we would now fail building dnsmasq with external toolchains that don't automatically search for headers. Pass TARGET_CPPFLAGS to the Makefile to resolve that. Fixes: 34a206bc1194 ("dnsmasq: add ubus notifications for new leases") Signed-off-by: Florian Fainelli <f.fainelli@gmail.com> (cherry picked from commit ef485bb23d207e0b1031d264a6fafce01d2bdf8f)
* wwan: json format in some modem definitionsAlexandru Ardelean2017-12-13268-349/+349
| | | | | | | | | | | | | | | | | | | | | Method used: ``` cd package/network/utils/wwan/files/data sed -e 's/}}/}/g' -i * sed -e 's/}\t"acm": 1/\t"acm": 1/g' -i * sed -e 's/}\t"generic": 1/\t"generic": 1/g' -i * ``` Manually adjusted commas. Validated with ``` for f in `ls` ; do echo $f ; python -m json.tool < $f || break ; done ``` Thanks to @lynxis for pointing out the commas. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com> (cherry picked from commit ad510c4d62fd6dd879a02cb2253eb37c2179d9c0)
* base-files: add /etc/profile.d to conffilesStijn Tintel2017-12-131-0/+1
| | | | | Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be> (cherry picked from commit ef255fc57ece1415b2a81346dde7d8ee3a32dee7)
* base-files: order conffiles alphabeticallyStijn Tintel2017-12-131-10/+10
| | | | | Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be> (cherry picked from commit 8446d3de05d0e0a6246dba9621b15095e9073dfb)
* procd: mdns: Support txt values with spacesKarl Palsson2017-12-131-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Properly quote the arguments so that you can register a service with TXT entries that contains spaces. Example: procd_add_mdns myservice tcp 9999 "key=descriptive text field 1" \ "another=something equally verbose" Output before: $ avahi-browse -r -v _myservice._tcp _myservice._tcp local hostname = [blah.local] address = [192.168.255.74] port = [9999] txt = ["verbose" "equally" "another=something" "1" "field" "text" "key=descriptive"] Output now: $ avahi-browse -r -v _myservice._tcp _myservice._tcp local hostname = [blah.local] address = [192.168.255.74] port = [9999] txt = ["another=something equally verbose" "key=descriptive text field 1"] Signed-off-by: Karl Palsson <karlp@etactica.com> (cherry picked from commit 7a423c389a162d2945901f0b5e7c604d36c64526)
* samba36: Remove syslog and load printers lines.Rosen Penev2017-12-131-2/+0
| | | | | | | printer support is removed using 200-remove_printer_support.patch. the syslog parameter requires samba to be compiled with --with-syslog. Currently samba does not log to syslog and probably has not for a long time. Signed-off-by: Rosen Penev <rosenp@gmail.com> (cherry picked from commit 343e3d2ba8efe20554522419697e0e4c3038c92f)
* samba36: Don't resolve interfaces.Rosen Penev2017-12-132-7/+2
| | | | | | | | It's redundant and also buggy. IPv6 link local addresses and ::1 are not resolved for example. Doesn't matter since lo and br-lan for example, resolve to them. Signed-off-by: Rosen Penev <rosenp@gmail.com> Acked-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk> (cherry picked from commit b2f60e6a7245c192703528a46dfb630c664dbc0c)
* samba36: Remove guest ok since LuCI configures it.Rosen Penev2017-12-131-2/+1
| | | | | | | guest ok is set per share and as such, don't override it. also, fix an error introduced in the last commit. Signed-off-by: Rosen Penev <rosenp@gmail.com> (cherry picked from commit ccb79a310c5273bf32d590323a99e72b587a0fb0)
* nvram: add help message for nvram magic not foundBangLang Huang2017-12-131-0/+1
| | | | | | | | The program would failed if nvram magic not found in specific partition. Signed-off-by: BangLang Huang <banglang.huang@foxmail.com> (cherry picked from commit 69da83d9f12e4e48b546fc3fc3ff555034959211)
* nvram: improve argument check when program startBangLang Huang2017-12-131-8/+9
| | | | | | | | print help message when argument count is less than 2. Signed-off-by: BangLang Huang <banglang.huang@foxmail.com> (cherry picked from commit c7e2a6fe923dc86bab14d94ead322a045efca4c9)
* nvram: add usage() functionBangLang Huang2017-12-131-10/+13
| | | | | | | | Merge the help message into a single function, so that we can use it somewhere else. Signed-off-by: BangLang Huang <banglang.huang@foxmail.com> (cherry picked from commit 2a253e7cdbacd1bd19da80ea6f35a93b42655c3b)
* nvram: fix memory leakBangLang Huang2017-12-132-3/+10
| | | | | | | | | | | | | | Fix memory leak on nvram_open() and nvram_open_rdonly(). For nvram_open(), the 'fd' should be closed on error, and mmap_area should be unmap when nvram magic can not be found. For nvram_open_rdonly(), the 'file' variable should free before return. Once nvram_find_mtd() return successfully, it will allocate memory to save mtd device string. Signed-off-by: BangLang Huang <banglang.huang@foxmail.com> (cherry picked from commit 1948d8e08c72106a01b359a30217cf92657cc79d)
* ca-certificates: Update to 20170717Christian Schoenebeck2017-12-131-4/+4
| | | | | | | Update to 20170717 Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com> (cherry picked from commit a2a226e6e83359ca0c7547ce9fed6ce4ecabc24b)
* base-files: drop unused preinit_echo functionRafał Miłecki2017-12-131-5/+0
| | | | | | | It isn't used for years since the old 99_10_run_init has been dropped. Signed-off-by: Rafał Miłecki <rafal@milecki.pl> (cherry picked from commit 1e13c6f77fc02df2bd8ed237ab9208ecdefb2dab)
* base-files: suppress uci not found output in login.shFlorian Eckert2017-12-131-1/+1
| | | | | | | | Fix "uci: Entry not found" output if "ttylogin" is not set in "etc/config/system" Signed-off-by: Florian Eckert <fe@dev.tdt.de> (cherry picked from commit c31f0421ceb47f347ade7317f263fcd09cfe325f)
* samba36: Remove legacy optionsRosen Penev2017-12-131-7/+2
| | | | | | | | | | | | | | Browseable is now set through LuCI per share, so remove it. Same with writeable (inverted synonym for read only). domain master and preferred master seem to be legacy settings for Windows 9x. encrypt passwords defaults to yes. Probably should not be disabled either. Also reordered alphabetically. Signed-off-by: Rosen Penev <rosenp@gmail.com> [rewrap commit message, fix SoB, fix author, bump pkg revsion] Signed-off-by: Jo-Philipp Wich <jo@mein.io> (cherry picked from commit 9dcb3fe7eb06b42c4f026e6cc5e89b2a18932782)
* kmod-sched-cake: drop maintainerKevin Darbyshire-Bryant2017-12-131-1/+0
| | | | | | | Drop myself from maintainership of 'cake'. Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk> (cherry picked from commit c7f8bcede6be73d0c07e058d57b55e4efc746440)
* zlib: use default Build/Configure ruleStijn Tintel2017-12-131-11/+9
| | | | | Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be> (cherry picked from commit 462ca4e059dbead678163da26fb4e14748f3021e)
* lzo: use default Build/Configure ruleStijn Tintel2017-12-131-6/+3
| | | | | Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be> (cherry picked from commit b3cba687a447478253f95febf17fa9376c98105d)
* netfilter: add iptables-mod-rpfilter packageAlin Nastac2017-12-132-0/+32
| | | | | | | | | | Unlike /proc/sys/net/ipv4/conf/INTF/rp_filter flag, rule iptables -t raw -I PREROUTING -m rpfilter --invert -j DROP prevents conntrack table to become full when a packet flood with randomly selected source IP addresses is received from the lan side. Signed-off-by: Alin Nastac <alin.nastac@gmail.com> (cherry picked from commit d8748e537f11ab5f2b5e2ed25d94baa5ce353984)
* bzip2: add symlink to binaryDaniel Golle2017-12-131-1/+3
| | | | | | | | | Other distributions incl. the OpenWrt ImageBuilder and SDK expect to find the bzip2 executable in /bin. Create a symlink at that location for compatibility. Signed-off-by: Daniel Golle <daniel@makrotopia.org> (cherry picked from commit eb7c14d512482e18d05f61afa44205167ea094c0)
* dropbear: add option to set max auth triesStijn Tintel2017-12-132-2/+4
| | | | | | | | Add a uci option to set the new max auth tries paramater in dropbear. Set the default to 3, as 10 seems excessive. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be> (cherry picked from commit 6371159b4ae8b4dd94d6319ac805b0c26962bb14)
* dropbear: server support option '-T' max auth triesKevin Darbyshire-Bryant2017-12-132-2/+132
| | | | | | | | | | | | | Add support for '-T n' for a run-time specification for maximum number of authentication attempts where 'n' is between 1 and compile time option MAX_AUTH_TRIES. A default number of tries can be specified at compile time using 'DEFAULT_AUTH_TRIES' which itself defaults to MAX_AUTH_TRIES for backwards compatibility. Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk> (cherry picked from commit 9aaf3d3501642640c9ec74268e671171c8de6103)
* hostapd: configure NAS ID regardless of encryptionYury Shvedov2017-12-131-3/+3
| | | | | | | | | | | | RADIUS protocol could be used not only for authentication but for accounting too. Accounting could be configured for any type of networks. However there is no way to configure NAS Identifier for non-WPA networks without this patch. Signed-off-by: Yury Shvedov <yshvedov@wimarksystems.com> [cleanup commit message] Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be> (cherry picked from commit 37c1513b1f98c93bf84bbcedd9782568e7d4abba)
* hostapd: add acct_interval optionYury Shvedov2017-12-131-2/+5
| | | | | | | | | Make an ability to configure Accounting-Interim-Interval via UCI Signed-off-by: Yury Shvedov <yshvedov@wimarksystems.com> [add hostapd prefix, cleanup commit message] Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be> (cherry picked from commit 0e7bbcd43b6f4b54ecc5c40130b5f86cbc9f1c07)
* valgrind: bump to 3.13.0Luiz Angelo Daros de Luca2017-12-133-49/+4
| | | | | Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com> (cherry picked from commit 991899cc5449d8595593a66c0130fdcaa088b36a)
* busybox: backport 'ip rule suppress_{prefixlength, ifgroup}'Stefan Tomanek2017-12-131-0/+145
| | | | | | | | | This is a backport from the busybox repository (192dce4b84fb32346ebc5194de7daa5da3b8d1b4); it enables the use of the suppress_{prefixlength,ifgroup} flags for policy routing rules. Signed-off-by: Stefan Tomanek <stefan.tomanek@wertarbyte.de> (cherry picked from commit de6ff1512955953e56735896c044c7aac97e14d9)
* libunwind: update to version 1.2.1Yousong Zhou2017-12-132-48/+2
| | | | | | | | | | | Changes since 1.2 a77b0cd Bump version to v1.2.1 5f354cb mips/tilegx: Add missing unwind_i.h header file 620d1c3 Add aarch64 getcontext functionality. Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> (cherry picked from commit 77dc6a2ae7c94ac3d496ebab589d4574ac7169d0)
* base-files: board.json's switch reset means existence, not argumentJonas Gorski2017-12-131-1/+4
| | | | | | | | Don't pass the value unconditionally to swconfig as a parameter but instead only call reset if it is 1. Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com> (cherry picked from commit fd952c7a83e5357f5dcab28c0bcaca756e27eaa0)
* gdb: remove Build/Compile rule ; default one worksAlexandru Ardelean2017-12-131-7/+0
| | | | | Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com> (cherry picked from commit ab485383fa4d60d6342cd5a4eb6b5429afba6b97)
* package/grub2: update to 2.02Alif M. Ahmad2017-12-131-6/+3
| | | | | | | Update to version 2.02 Signed-off-by: Alif M. Ahmad <alive4ever@live.com> (cherry picked from commit 415c47de79ada7496c39f435df0b0523472aee58)
* ppp: propagate master firewall zone to dynamic slave interfaceHans Dedecker2017-12-132-1/+4
| | | | | | | | | | | Assign the virtual DHCPv6 interface the firewall zone of the parent interface so fw3 knows the zone to which the virtual DHCPv6 interface belongs. This guarantees the firewall settings are applied correctly for the virtual DHCPv6 interface and allows to query the zone to which the virtual DHCPv6 interface belongs via the fw3 network option. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com> (cherry picked from commit 21f25bc4a325b3075d6426047640e9cf6176894c)
* usbmode: remove devices with unsupported modesJulian Labus2017-12-131-2/+7
| | | | | | | | remove files which include the following mode options BlackberryMode OptionMode PantechMode QuantaMode Signed-off-by: Julian Labus <julian@labus-online.de> (cherry picked from commit b757de65b3c3aa210022c65445df1d6dbbf9eadd)
* elfutils: Pass -Wno-unused-result to silence warnings as errorsFlorian Fainelli2017-12-131-1/+1
| | | | | | | | | | | | | | | | | | | | elfutils turns on -Werror by default, and patch 100-musl-compat.patch changes how strerror_r is used and we no longer use the function's return value. This causes the following build error/warning to occur with glibc-based toolchains: dwfl_error.c: In function 'dwfl_errmsg': dwfl_error.c:158:18: error: ignoring return value of 'strerror_r', declared with attribute warn_unused_result [-Werror=unused-result] strerror_r (error & 0xffff, s, sizeof(s)); ^ cc1: all warnings being treated as errors Fixing this would be tricky as there are two possible signatures for strerror_r (XSI and GNU), just turn off unused-result warnings instead. Signed-off-by: Florian Fainelli <f.fainelli@gmail.com> (cherry picked from commit 484f768dfa295d9fccd82c57cae00458f32b7182)
* lldpd: bump to 0.9.7Stijn Tintel2017-12-131-2/+2
| | | | | Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be> (cherry picked from commit 423a7a6b752d4780f7f61722443ed5f4f50e3bda)
* libunwind: update to 1.2Yousong Zhou2017-12-133-19/+58
| | | | | | | | | | | | Addresses CVE-2015-3239: Off-by-one error in the dwarf_to_unw_regnum function in include/dwarf_i.h in libunwind 1.1 allows local users to have unspecified impact via invalid dwarf opcodes. Upstream stable-v1.2 fixed the missing unwind_i.h issue but no new tarball is released yet Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> (cherry picked from commit 5d48dc1146171520445c43ee894d9dfce09ae4e2)
* base-files: fix default procd reloadAlexandru Ardelean2017-12-131-1/+1
| | | | | | | | | | | | | | | | | | | Bug introduced with 6713694. I did not count on procd handling reload as mentioned in this doc: https://wiki.openwrt.org/inbox/procd-init-scripts ``` procd_set_param file /var/etc/your_service.conf # /etc/init.d/your_service reload will restart the daemon if these files have changed procd_set_param netdev dev # likewise, except if dev's ifindex changes. procd_set_param data name=value ... # likewise, except if this data changes. ``` The service would be restarted regardless of any of those params. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com> (cherry picked from commit c7ee30d53af12ea725296cc323f68e8fe04e532c)
* lldpd: drop specific respawn params [use system-wide]Alexandru Ardelean2017-12-131-3/+0
| | | | | | | | I think I added these respawn params [a while back], when I did the conversion to procd init script format. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com> (cherry picked from commit ce8bfa9407bc1518107a99edc8568a59fe269fa5)
* elfutils: bump to 0.169Luiz Angelo Daros de Luca2017-12-136-241/+271
| | | | | | | | | Removed patches (now upstream): - 004-maybe-uninitialized.patch - 007-fix_TEMP_FAILURE_RETRY.patch Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com> (cherry picked from commit ccc54b29352a7d30762b84761414aa1798ce1183)
* devel/trace-cmd: Update to 2.6.1Daniel Engberg2017-12-131-7/+4
| | | | | | | | Update trace-cmd to version 2.6.1 Switch to tarball download Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net> (cherry picked from commit b295966f8767ff84b55e547ae5c2967772c3ede2)
* comgt-3g: enable modem before to setpinGiuseppe Lippolis2017-12-131-0/+1
| | | | | | | some modems needs to be enabled with CFUN=1 before to set the pin Signed-off-by: Giuseppe Lippolis <giu.lippolis@gmail.com> (cherry picked from commit db776c01e1202307b78a4bb757f78db5ea48e27e)
* devel/strace: Update to 4.16Daniel Engberg2017-12-132-3/+3
| | | | | | | | Update strace to 4.16 Refresh patch Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net> (cherry picked from commit 4b0a2ca9a47ce30f08161b5b12991f15d590938c)
* network/utils/ipset: Update to 6.32Daniel Engberg2017-12-131-2/+2
| | | | | | | Update ipset to 6.32 Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net> (cherry picked from commit ea2927e1eaa321033b28f08db0ec59e7df5f7806)
* mac80211: gracefully handle preexisting VIFJo-Philipp Wich2017-12-131-0/+6
| | | | | | | | | | | | | | | | | | | | | Gracefully handle cases where the to-be-created wireless interface already exists on the system which might commonly happen with non-multi-SSID capable wireless drivers. This fixes commit 8301e613655c2d95fa5430a1a57d92d966fdc70b which caused previously ignored "Too many open files in system (-23)" errors to fail the wireless setup procedure. With the updated approach we'll still try recreating the vif after one second if the first attempt to do so failed with ENFILE but we will now consider the operation successfull if a second attempt still yields ENFILE with the requested ifname already existing on the system. Fixes FS#664, FS#704. Suggested-by: Vittorio Gambaletta <openwrt@vittgam.net> Signed-off-by: Jo-Philipp Wich <jo@mein.io> (cherry picked from commit 4a033475453b63d0d5ae41489e7c395882567698)
* hostapd: fix reload frequency change patchAbhilash Tuse2017-12-132-7/+32
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When sta is configured, hostapd receives 'stop' and 'update' command from wpa_supplicant. In the update command, hostapd gets sta parameters with which it configures ap. Problem is, with the default wireless configuration: mode:11g freq:2.4GHz channel:1 If sta is connected to 5GHz network, then ap does not work. Ideally with 340-reload_freq_change.patch hostapd should reload the frequency changes and start ap in 5GHz, but ap becomes invisible in the network. This issue can be reproduced with following /etc/config/wireless: config wifi-device radio0 option type mac80211 option channel 1 option hwmode 11g option path 'virtual/uccp420/uccwlan' option htmode 'none' config wifi-iface 'ap' option device 'radio0' option encryption 'none' option mode 'ap' option network 'ap' option ssid 'MyTestNet' option encryption none config wifi-iface 'sta' option device radio0 option network sta option mode sta option ssid TestNet-5G option encryption psk2 option key 12345 This change updates current_mode structure based on configured hw_mode received from wpa_supplicant. Also prepare rates table after frequency selection. Signed-off-by: Abhilash Tuse <Abhilash.Tuse@imgtec.com> Signed-off-by: Felix Fietkau <nbd@nbd.name> [cleanup, patch refresh] (cherry picked from commit 41feba8c4aa33ca3c6fa7c1a6c3224aae02440a7)
* kernel: allow selecting RTC drivers on targets without explicit RTC supportFelix Fietkau2017-12-131-8/+15
| | | | | | | Keep them disabled by default to avoid pulling in extra kernel bloat Signed-off-by: Felix Fietkau <nbd@nbd.name> (cherry picked from commit 5afe9a054cbcb1630a42200f3ac799432522a87d)