Openwrt is a single user system. So keepalived is runnig as root.
If we add the config options `script_user root` and
`enabled_script_security' the following warnings are gone.

> local1.info Keepalived_vrrp[5382]: SECURITY VIOLATION - scripts are
being executed but script_security not enabled.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

frr: makefile cleanup and misc fixes

libyang: update to 1.0.130

vpn-policy-routing: bugfix: remove non-ASCII from log; update README

boost: Package Version Update (1.73.0)

libtirpc: update to 1.2.6

prometheus-node-exporter-lua: Change node_time_seconds type to "gauge"

neon: update to 0.31.1

The official node_exporter reports node_time_seconds as a gauge, but
prometheus-node-exporter-lua reports it as a counter. To be consistent
with the official implementation, and because "gauge" is more correct
than "counter" for this metric (system time can decrease, but the
Prometheus documentation states, "A counter is a cumulative metric that
represents a single monotonically increasing counter whose value can
only increase or be reset to zero on restart."), change the type for
node_time_seconds to "gauge".

Signed-off-by: Forest Crossman <cyrozap@gmail.com>

vpnbypass: bugfix: remove non-ASCII from system log; update README

Signed-off-by: Stan Grishin <stangri@melmac.net>

Shorewall: Bump to 5.2.4.4

This commit updates Boost to version 1.73.0
In this release, there are two new libraries
 - Nowide [2] - Standard library functions with UTF-8 API on Windows,
   from Artyom Beilis.
 - Static String [3] - A dynamically resizable string of characters
   with compile-time fixed capacity and contiguous embedded storage,
   from Vinnie Falco and Krystian Stasiowski.

More info about Boost 1.73.0 can be found at the usual place [1].

[1]: https://www.boost.org/users/history/version_1_73_0.html
[2]: https://www.boost.org/libs/nowide/
[3]: https://www.boost.org/libs/static_string/

Signed-off-by: Carlos Miguel Ferreira <carlosmf.pt@gmail.com>

fish: update to 3.1.2

Signed-off-by: Curtis Jiang <jqqqqqqqqqq@gmail.com>

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

fix mips runtime by backporting some yang changes from master
added commited fixes to 7.3
also add option for snmp support

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Signed-off-by: Stan Grishin <stangri@melmac.net>

liblo: update to 0.31

ddns-scripts: Add digitalocean as DDNS provider

Signed-off-by: Jeroen Peelaerts <jeroen.peelaerts@gmail.com>

Refreshed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Add HOST_BUILD_PARALLEL for faster compilation.

Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Upstream changed.

Add license information.

Add PKG_BUILD_PARALLEL for faster compilation.

Remove several outdated options.

Refreshed OpenSSL patch.

Other small cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libyaml: update to 0.2.4

meson: update to 0.54.1

python-pytz: update version to 2020.1

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

Revert gperf: remove

mocp: disable ffmpeg

jamvm: remove unneeded host build, and the package itself

python-dns: Change download source, remove incorrect PKG_CPE_ID

Java support is no longer feasible in openwrt.  It's outdated, and can't
be usd without classpath, which has been removed.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

openconnect: Allow to set `usergroup` option

gperf is a basic tool used when building packages. It's not available on
all hosts, in which case having a host package like this one is
required. For instance the CircleCI environment does not contain gperf,
in which case building of software requiring gperf fails.

This commit reverts the gperf removal.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>