Commit Graph

4461 Commits

Author SHA1 Message Date
Hauke Mehrtens
57d891adfd nftables: Activate link time optimization (LTO)
The ipk sizes for mips_24Kc change like this:
old:
nftables-json_0.9.6-1_mips_24kc.ipk	231.968
nftables-nojson_0.9.6-1_mips_24kc.ipk	204.731

new:
nftables-json_0.9.6-2_mips_24kc.ipk	221.894
nftables-nojson_0.9.6-2_mips_24kc.ipk	193.932

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2020-09-07 17:21:37 +08:00
Hauke Mehrtens
589752e7e1 libnftnl: Activate link time optimization (LTO)
The ipk sizes for mips_24Kc change like this:
old:
libnftnl12_1.1.7-1_mips_24kc.ipk	47.459

new:
libnftnl12_1.1.7-2_mips_24kc.ipk	45.742

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2020-09-07 17:20:53 +08:00
Hauke Mehrtens
404f2dbe38 jansson: Activate link time optimization (LTO)
The ipk sizes for mips_24Kc change like this:
old:
jansson4_2.13.1-1_mips_24kc.ipk	19.171

new:
jansson4_2.13.1-2_mips_24kc.ipk	18.936

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2020-09-07 17:20:07 +08:00
Hauke Mehrtens
9dea3fb583 nftables: Update to version 0.9.6
The ipk sizes for mips_24Kc change like this:
old:
nftables-json_0.9.3-1_mips_24kc.ipk	220.262
nftables-nojson_0.9.3-1_mips_24kc.ipk	192.937

new:
nftables-json_0.9.6-1_mips_24kc.ipk	231.968
nftables-nojson_0.9.6-1_mips_24kc.ipk	204.731

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2020-09-07 17:19:36 +08:00
Kevin Darbyshire-Bryant
56dae733ed nftables: implement no/json variants
Replace the build time choice of json support with a package based
choice.  Users requiring a json aware version of 'nft' may now install
nftables-json.

The default choice to fulfill the 'nftables' package dependency is
'nftables-nojson'

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2020-09-07 17:19:15 +08:00
Hauke Mehrtens
6274bc8f27 libnftnl: Update to version 1.1.7
The ipk sizes for mips_24Kc change like this:
old:
libnftnl12_1.1.5-1_mips_24kc.ipk	46.252

new:
libnftnl12_1.1.7-1_mips_24kc.ipk	47.459

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2020-09-07 17:14:55 +08:00
Hauke Mehrtens
c6d1dc22f6 jansson: Update to version 2.13.1
This also sets the ABI_VERSION as this is a versioned shared library.

The ipk sizes for mips_24Kc change like this:
old:
jansson_2.12-1_mips_24kc.ipk	18.692

new:
jansson4_2.13.1-1_mips_24kc.ipk	19.171

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2020-09-07 17:14:28 +08:00
Teaffanie
421bb0cc38
luci-app-passwall: sync with upstream source 2020-09-06 21:08:00 +08:00
CN_SZTL
fa86fad9d4
Core: bump to Mod20.09 2020-09-06 14:29:41 +08:00
Christian Lamparter
8be3c496f9
base-files: support label-property-less in get_dt_leds
The LED's "label" property has been deprecated in upstream by:

|commit c5d18dd6b64e09dd6984bda9bdd55160af537a8c
|Author: Jacek Anaszewski <jacek.anaszewski@gmail.com>
|Date:   Sun Jun 9 20:19:04 2019 +0200
|
|    dt-bindings: leds: Add properties for LED name construction
|
|    Introduce dedicated properties for conveying information about
|    LED function and color. Mark old "label" property as deprecated.
|
|    Additionally function-enumerator property is being provided
|    for the cases when neither function nor color can be used
|    for LED differentiation.

in order to be somewhat prepared, this patch adds a fallback
as a last resort to make the current led code work by falling
back to the node-name as the "label".

Signed-off-by: Christian Lamparter <chunkeey@gmail.com>
2020-09-06 13:22:08 +08:00
Hans Dedecker
865051359e
ppp: update to latest git HEAD
af30be0 Fix setting prefix for IPv6 link-local addresss
0314df4 Disable asking password again when prompt program returns 128

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2020-09-06 13:18:39 +08:00
David Bauer
61ff4a04f8
firewall: bump to latest HEAD
8c2f9fa fw3: zones: limit zone names to 11 bytes
78d52a2 options: fix parsing of boolean attributes

Signed-off-by: David Bauer <mail@david-bauer.net>
2020-09-06 13:18:19 +08:00
CN_SZTL
351f0dbe23
luci-app-unblockneteasemusic: sync with upstream source 2020-09-06 12:13:14 +08:00
CN_SZTL
12abcf90bf
luci-app-ssr-plus: sync with upstream source 2020-09-06 12:07:23 +08:00
CN_SZTL
e7ec7ddc16
brook: bump to 20200909 2020-09-06 12:06:24 +08:00
CN_SZTL
34dbeede98
luci-app-passwall: bump to 3.9-54 2020-09-06 12:04:39 +08:00
CN_SZTL
5257c59e66
luci-app-socat: add package 2020-09-06 12:03:01 +08:00
CN_SZTL
df70e337a1
luci-app-jd-dailybonus: sync with upstream source 2020-09-06 11:56:09 +08:00
CN_SZTL
caa090a777
naiveproxy: bump to v85.0.4183.83-2 2020-09-06 11:54:31 +08:00
AmadeusGhost
b7da13ed02 verysync: fix download aaddress 2020-09-06 11:36:10 +08:00
Karel Kočí
bb379fc264
fstools: block-mount: fix restart of fstab service
Restarting service causes file-systems to be unmounted without being
mounted back. When this service was obsoleted it should have been
implemented in a way that all actions are ignored. Up to this commit
default handler was called when restart was requested. This default
handler just simply calls stop and start. That means that stop called
unmount but start just printed that this service is obsoleted.

This instead implements restart that just prints same message like start
does. It just calls start in reality. This makes restart unavailable for
call.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
(cherry picked from commit 3ead9e7b74)
2020-09-06 08:23:46 +08:00
AmadeusGhost
a13e39fdd6 qntfs: fix target dependencies
fix #22
2020-09-05 11:32:58 +08:00
CN_SZTL
ea8a33ab70
luci-app-naiveproxy: fix typo error 2020-09-05 06:47:26 +08:00
CN_SZTL
8e8c06766d
OpenClash: sync with upstream source 2020-09-05 06:26:51 +08:00
CN_SZTL
a9f63b1111
luci-app-passwall: bump to 3.9-52 2020-09-05 06:18:34 +08:00
Hans Dedecker
f5e099ba95
nghttp2: move to packages.git
As the package curl has been moved to packages.git and only libcurl
depends on libnghttps move it as well to packages.git.
This is based on the Hamburg  2019 decision that non essential packages
should move outside base.

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2020-09-04 16:32:21 +08:00
Paul Spooren
ddb637bdb7
default-settins: fix default url 2020-09-04 16:31:48 +08:00
Hauke Mehrtens
449b681234
mac80211: Fix potential endless loop
Backport a fix from kernel 5.8.3.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit ca5ee6eba3)
2020-09-04 16:27:25 +08:00
Daniel Golle
b8afac28dd
libselinux: package executables into -utils
Add new package libselinux-utils containing the executable
utilities included with libselinux.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-09-04 16:26:49 +08:00
Magnus Kroken
5632ba7585
mbedtls: update to 2.16.8
This release of Mbed TLS provides bug fixes and minor enhancements. This
release includes fixes for security issues and the most notable of them
are described in more detail in the security advisories.

* Local side channel attack on RSA and static Diffie-Hellman
* Local side channel attack on classical CBC decryption in (D)TLS
* When checking X.509 CRLs, a certificate was only considered as revoked
if its revocationDate was in the past according to the local clock if
available.

Full release announcement:
https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.8

Signed-off-by: Magnus Kroken <mkroken@gmail.com>
2020-09-04 16:13:33 +08:00
Rosen Penev
41a96d7750
policycoreutils: add nls.mk
Fixes compilation under uClibc-ng.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-09-04 16:12:13 +08:00
CN_SZTL
ac690d43b2
naiveproxy: bump to 85.0.4183.83-1 2020-09-04 15:52:04 +08:00
Alecthw
7349147cdd
update n2n version to 2.8.0 2020-09-04 14:58:19 +08:00
CN_SZTL
9a83e2d52c
Revert "naiveproxy: bump to 85.0.4183.83-1"
The latest version has some issue with non-x64 build.

This reverts commit a7d6a5b3a3.
2020-09-04 14:53:46 +08:00
CN_SZTL
214f5cb261
luci-app-passwall: bump tp 3.9-51 2020-09-04 14:53:17 +08:00
CN_SZTL
d17bc9914f
v2ray-plugin: bump to 1.4.2 2020-09-04 13:20:13 +08:00
CN_SZTL
7f9670df27
v2ray: bump to 4.27.5 2020-09-04 13:18:14 +08:00
CN_SZTL
a7d6a5b3a3
naiveproxy: bump to 85.0.4183.83-1 2020-09-04 13:16:51 +08:00
CN_SZTL
44c3b91f93
luci-app-ssrplus: sync with upstream source 2020-09-02 13:17:00 +08:00
Walter Sonius
c1c5b38f7c base-files: fix comment typo in lib/functions/network.sh
Fix typo in comment.

Signed-off-by: Walter Sonius <walterav1984@gmail.com>
[commit title/message facelift]
Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
2020-09-02 11:33:22 +08:00
Daniel Golle
f8c43f0a66 refpolicy: skip building docs
Building docs requires xmllint and other bulky things being present on
the host. Skip that.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-09-02 11:31:01 +08:00
Daniel Golle
fbf7c73023 libaudit: add host-build required by policycoreutils/host
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-09-02 11:30:31 +08:00
Daniel Golle
289bbb639d libsemanage: host-build depends on renamed libaudit package
Fixes: efdf619f21 ("audit: build only libaudit")
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-09-02 11:29:58 +08:00
Hauke Mehrtens
a1b8c5d3eb ugps: update to the latest version
511a5b3 ugps: fix 64-bit time_t

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2020-09-02 11:29:24 +08:00
Daniel Golle
eee62e8c9c libaudit: drop unused file
Drop init script from libaudit package. It will be added to the
'audit' package in the packages feed.

Fixes: efdf619f21 ("audit: build only libaudit")
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-09-01 18:47:31 +08:00
Paul Spooren
6d73109e94 build: opkg-key variable key folder
The key folder is used by `opkg` and `usign` to store and retrieve
trusted public keys. Using `opkg-key` outside a running device is
unfeasible as the key folder is hard coded to `/etc/opkg/keys`.

This commit adds a variable OPKG_KEYS which defaults to `/etc/opkg/keys`
if unset, however allows set arbitrary key folder locations.

Arbitrary key folder locations are useful to add signature verification
to the ImageBuilders.

Signed-off-by: Paul Spooren <mail@aparcar.org>
2020-09-01 17:40:52 +08:00
Paul Spooren
717aa923b5 px5g-wolfssl: cleanup Makefile and SPDX license
Minor cosmetic cleanups of the Makefile and add a SPDX compatible
license headers.

Signed-off-by: Paul Spooren <mail@aparcar.org>
2020-09-01 17:40:29 +08:00
Daniel Golle
9ca88438c1 libsemanage: add missing package metadata
License and CPE-ID were missing, add them.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-09-01 17:40:07 +08:00
Daniel Golle
c03376598c audit: build only libaudit
Turns out auditd depends on libev. Lets have that in packages.git.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-09-01 17:39:46 +08:00
Hauke Mehrtens
d072ac42cd strace: Update to version 5.8
Deactivate multiple personalities support, because this causes compile
problems at least on the x86/64 target. As OpenWrt compiles all
binaries itself all binaries will use the native personality which is
also used by strace. This change will make it impossible to debug i386
binaries on x86_64 OpenWrt targets for example.

Just deactivate it for ARM64 too.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2020-09-01 17:39:24 +08:00