As miniupnpd is running as root, libcap(-ng) can be used to limit its
capabilities.
libcap-ng is very small, so this isn't a problem.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
The two unique packages "Unbound light" and "Unbound heavy"
were not working well due to the fact that Unbound is mostly
its library. Tools and helpers would crash. Instead a reasonable
default Unbound is built. Also up select options like python
are added. libevent and libpthreads are options to down select.
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
Use the newly introduced configure script.
Use PKG_INSTALL for consistency between packages.
Use PKG_BUILD_PARALLEL for faster compilation.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Add new subpackage containing pam authentication module. Shouldn't
affect dependencies and nothing changes, there is just one more module
enabled for people interested in it.
Signed-off-by: Michal Hrusecky <michal@hrusecky.net>
If miniupnpd is installed but disabled or not running, the hotplug
script will query uci for keys that don't exist and grep a temporary
config file that doesn't exist, resulting in the following errors:
uci: Entry not found
grep: /var/etc/miniupnd.conf: No such file or directory
These would arise when an interface is brought up or down, and are
more confusing than helpful, especially when miniupnpd is disabled.
Suppress these errors.
Signed-off-by: David Ehrmann <ehrmann@gmail.com>
b933f9cf0c in base made several changes
to OpenWrt's libssp support. It seems this workaround is no longer
needed.
Simplified the configure script slightly.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Switched to new upstream.
Added PKG_BUILD_PARALLEL for faster compilation.
Refreshed and fixed up patches.
Fixed up license information.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Unbound has a quirk and may reply on a different device address.
When Unbound answers with from-address different than it
received queries on, it may cause trouble for select VPN and
firewall configurations. Ensure Unbound replies with the same
address by changing this default.
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
* add anti_ad blocklist source
* made SafeSearch provider configurable, you can limit
SafeSearch to certain providers
* update readme
Signed-off-by: Dirk Brenken <dev@brenken.org>
* update to 4.12.3
* update/remove patches
* disable netbios port 139 on 'DISABLE_NETBIOS' option or missing 'nmbd'
Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
Includes:
- test_storage: further refactoring, added test functionality, and TESTING.md to describe testing approach
- tcpsocket: implement client_read_cb with ustream_read my wheels are much worse than offical wheels.
- Revert "tcpsocket: implement client_read_cb with ustream_read my wheels are much worse than offical wheels."
- uci: fix arm64 compiling
Fixes: #12488
Signed-off-by: David Woodhouse <dwmw2@infradead.org>
* add regional list source for czech/slovak
* add regional list source for korea
* adapt oisd_nl changes, switch to adb-syntax domains
Signed-off-by: Dirk Brenken <dev@brenken.org>
Rosen Penev
Eric Luehrsen
Stan Grishin
David Bauer
Alexandru Ardelean
Donald Hoskins
Olivier Poitrey
Rozhuk Ivan
Huangbin Zhan
Michal Hrusecky
W. van den Akker
David Ehrmann
Jianhui Zhao
Andy Walsh
Othmar Truniger
Josef Zila
Florian Eckert
Yousong Zhou
Aaron Goodman
Dirk Brenken
David Woodhouse