Fixes:
CVE-2020-10592

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

pidfile should not be set. tor handles it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Changes:
-add uci config
-create pid file by procd
-add reload function

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Note:
In some cases when tor daemon starts before
than the router is connected to the Internet.
Tor will exit and you have to run it manually.
This should fix this case.

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Now that zstd is in the tree, tor stars to pick it up.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

* remove "torify" script
  - "torify" script is just a wrapper around torsocks,
    but torsocks is not currently present in packages.
* tor-geoip: fix "install" recipe:
  - use $(INSTALL_DATA) instead of $(CP) as a proper way
    of installing files
* drop deprecated configure option:
    "--with-ssl-dir" is considered deprecated and obsolete,
    while "--with-openssl-dir" is already present.
* build in parallel
* build with -ffunction-sections, -fdata-sections,
  --gc-sections and -flto
* remove "--disable-largefile" in CONFIGURE_ARGS
* remove "-std=gnu99" in EXTRA_CFLAGS
* use $(FPIC) in EXTRA_CFLAGS
* remove trailing whitespace

Compile- and run-tested on ar71xx/generic,
TP-Link Archer C7 v2 (world-wide version).

Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

This fixes the TROVE-2017-008 (CVE-2017-0380) security problem.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

fix Makefile chmod (644)
replace MD5SUM with HASH
add PKG_MIRROR_HASH when PKG_SOURCE_PROTO:=git

(PKG_SOURCE_PROTO:=svn tarballs are not reproducible for now)

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>

This fixes CVE-2017-0376

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

Make tor log to syslog by default instead of stdout.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

These are some additional applications build by the tor package.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

This add the IPv6 addresses to the tor-geoip6 package.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

Mark the directories containing the keys for hidden services as
conffiles to preserve them over sysupgrade.

Fixes: #2247

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

In addition update some configure options and use EXTRA_CFLAGS.
Setting RunAsDaemon to 1 will be overwritten by the init script option
"--runasdaemon 0" anyway and we want it in foreground for procd.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

- update to 0.2.8.9
    - use sha256 instead of md5 for integrity check
    - add dependency: libcap

signed-off-by: Nima Fatemi <nima@torproject.org>

Signed-off-by: Felix Fietkau <nbd@nbd.name>

Original url was 404.
Fixes Github issue #2284

The "internal pure-C" tor-fw-helper was removed in 0.2.7.5. This removes
the tor-fw-helper package and references to its dependencies.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Ondrej Mikle <ondrej.mikle@nic.cz>

seccomp is only supported on x86, amd64 and arm in tor.
This deactivated it currently completely which should close #935,
 #1097, #1147 and #1161.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Ian Leonard <antonlacon@gmail.com>

recent changes in trunk allow us to specify the userid inside the openwrt makefile.
the info is stored int he meta data of the IPK contorl file and users are generated
by the new generic postinst trigger.

Signed-off-by: John Crispin <blogic@openwrt.org>