summaryrefslogtreecommitdiffstats
path: root/meta-networking
Commit message (Collapse)AuthorAgeFilesLines
...
* atftp: upgrade 0.7.4 -> 0.7.5zhengruoqin2021-10-261-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | atftp-0.7.5 =========== README: update contributors list text files: mark/convert all textfiles to UTF-8 fix some compiler warnings fix buffer overflow in atftpd (CVE-2021-41054) insert typos.patch insert atftp-0.7-ack_heuristic.patch insert atftp-0.7-server_receive_race.patch insert patch atftp-0.7-sorcerers_apprentice.patch test.sh: check for root no longer necessary Merge commits from https://github.com/srett/atftp ================================================= tftpd.c: Only drop privs if requested or running as root + check for failure fix invalid read of 1 byte in tftp_send_request. Check return value of fseek(), abort if != 0 options.c: Proper fix for the read-past-end-of-array configure.ac: Add -std=gnu89 if gcc/clang is detected tftpd.c: Fix memleak if thread spawning fails atftp: Check return value of fgets, buffer might be uninitialized on NULL Fix check for argz support (HAVE_ARGZ -> HAVE_ARGZ_H) replace LICENSE with current version License-Update: 1. Address changed 2. "the GNU Library General Public License" changed to "the GNU Lesser General Public License" 3. Format of LICENSE changed Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mctp: Add MCTP control utilitiesJeremy Kerr2021-10-262-0/+32
| | | | | | | | | | | | | | | | | This change adds a recipe for the Management Component Transport Protocol userspace utilities. This contains: - the command-line 'mctp' tool, similar to 'ip', for setting up links, assigning local address and configuring routing. - an optional 'mctpd' daemon, which implements the MCTP control protocol, and manages remote address assignment. The latter depends on systemd (for sdbus), so use a PACKAGECONFIG[systemd] for the conditional service installation. Signed-off-by: Jeremy Kerr <jk@codeconstruct.com.au> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* autofs: upgrade 5.1.7 -> 5.1.8zhengruoqin2021-10-263-114/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | autofs-5.1.8 changelog: - add xdr_exports(). - remove mount.x and rpcgen dependencies. - dont use realloc in host exports list processing. - use sprintf() when constructing hosts mapent. - fix mnts_remove_amdmount() uses wrong list. - Fix option for master read wait. - eliminate cache_lookup_offset() usage. - fix is mounted check on non existent path. - simplify cache_get_parent(). - set offset parent in update_offset_entry(). - remove redundant variables from mount_autofs_offset(). - remove unused parameter form do_mount_autofs_offset(). - refactor umount_multi_triggers(). - eliminate clean_stale_multi_triggers(). - simplify mount_subtree() mount check. - fix mnts_get_expire_list() expire list construction. - fix inconsistent locking in umount_subtree_mounts(). - fix return from umount_subtree_mounts() on offset list delete. - pass mapent_cache to update_offset_entry(). - fix inconsistent locking in parse_mount(). - remove unused mount offset list lock functions. - eliminate count_mounts() from expire_proc_indirect(). - eliminate some strlen calls in offset handling. - don't add offset mounts to mounted mounts table. - reduce umount EBUSY check delay. - cleanup cache_delete() a little. - rename path to m_offset in update_offset_entry(). - don't pass root to do_mount_autofs_offset(). - rename tree implementation functions. - add some multi-mount macros. - remove unused functions cache_dump_multi() and cache_dump_cache(). - add a len field to struct autofs_point. - make tree implementation data independent. - add mapent tree implementation. - add tree_mapent_add_node(). - add tree_mapent_delete_offsets(). - add tree_mapent_traverse_subtree(). - fix mount_fullpath(). - add tree_mapent_cleanup_offsets(). - add set_offset_tree_catatonic(). - add mount and umount offsets functions. - switch to use tree implementation for offsets. - remove obsolete functions. - remove redundant local var from sun_mount(). - use mount_fullpath() in one spot in parse_mount(). - pass root length to mount_fullpath(). - remove unused function master_submount_list_empty(). - move amd mounts removal into lib/mounts.c. - check for offset with no mount location. - remove mounts_mutex. - remove unused variable from get_exports(). - add missing free in handle_mounts(). - remove redundant if check. - fix possible memory leak in master_parse(). - fix possible memory leak in mnts_add_amdmount(). - fix double unlock in parse_mount(). - add length check in umount_subtree_mounts(). - fix flags check in umount_multi(). - dont try umount after stat() ENOENT fail. - remove redundant assignment in master_add_amd_mount_section_mounts(). - fix dead code in mnts_add_mount(). - fix arg not used in error print. - fix missing lock release in mount_subtree(). - fix double free in parse_mapent(). - refactor lookup_prune_one_cache() a bit. - cater for empty mounts list in mnts_get_expire_list(). - add ext_mount_hash_mutex lock helpers. - fix amd section mounts map reload. - fix dandling symlink creation if nis support is not available. - dont use AUTOFS_DEV_IOCTL_CLOSEMOUNT. - fix lookup_prune_one_cache() refactoring change. - fix amd hosts mount expire. - fix offset entries order. - use mapent tree root for tree_mapent_add_node(). - eliminate redundant cache lookup in tree_mapent_add_node(). - fix hosts map offset order. - fix direct mount deadlock. - add missing description of null map option. - fix nonstrict offset mount fail handling. - fix concat_options() error handling. - eliminate some more alloca usage. - use default stack size for threads. - fix use of possibly NULL var in lookup_program.c:match_key(). - fix incorrect print format specifiers in get_pkt(). - add mapent path length check in handle_packet_expire_direct(). - add copy length check in umount_autofs_indirect(). - add some buffer length checks to master map parser. - add buffer length check to rmdir_path(). - eliminate buffer usage from handle_mounts_cleanup(). - add buffer length checks to autofs mount_mount(). - make NFS version check flags consistent. - refactor get_nfs_info(). - also require TCP_REQUESTED when setting NFS port. 0001-Do-not-hardcode-path-for-pkg.m4.patch refreshed. autofs-5.1.7-use-default-stack-size-for-threads.patch removed since it is included in 5.1.8. Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* bluepy: Fix permissions on tarballKhem Raj2021-10-202-1/+35
| | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Marco Cavallini <m.cavallini@koansoftware.com>
* bluepy: Set PV and correct syntax for RDEPENDSKhem Raj2021-10-201-7/+8
| | | | | | | | | | | Also organize the recipe to to match OE style Remove PYTHON_PN from DEPENDS, setuptools should be enough Correct setting LIC_FILES_CHKSUM Move setting git SHA to SRCREV Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Marco Cavallini <m.cavallini@koansoftware.com> Cc: Martin Jansa <martin.jansa@gmail.com>
* bluepy_git.bb: Added recipe for BluePy Python interface to Bluetooth LE on ↵Marco Cavallini2021-10-191-0/+17
| | | | | | | Linux (v2) Signed-off-by: Marco Cavallini <koansoftware@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: upgrade 5.9.3 -> 5.9.4Yi Zhao2021-10-191-2/+2
| | | | | | | | Add openssl PACKAGECONFIG back as the openssl 3.0 compatibility issue has been fixed. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ifenslave: upgrade 2.12 -> 2.13wangmy2021-10-191-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | ifenslave (2.13) unstable; urgency=medium * QA upload. [ Guillem Jover ] * Fix MAC address setting messed up by udev for bond interfaces. (Closes: #949062) * Use ifquery instead of example contrib script ifstate. (Closes: #991930) * Fix ifquery redirections. * Bump Standards-Version to 4.6.0 (no changed needed). * Remove long supported Linux version requirements from Description. [ Sami Haahtinen ] * Use correct argument in setup_slave_device(). (Closes: #968368) [ Oleander Reis ] * Handle slave definitions of interfaces with no bond settings. (Closes: #990428) * Delete bond interfaces on ifdown -a. (Closes: #992102) -- Guillem Jover <guillem@debian.org> Sun, 17 Oct 2021 06:02:55 +0200 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opensaf: update to 5.21.09Oleksandr Kravchuk2021-10-161-2/+1
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nng: update to 1.4.0Oleksandr Kravchuk2021-10-161-4/+2
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: update to 1.32.12Oleksandr Kravchuk2021-10-161-1/+1
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager-openvpn: upgrade 1.8.14 -> 1.8.16zangrc2021-10-161-2/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* kronosnet: Correct path to poll.hKhem Raj2021-10-162-1/+32
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.5.3 -> 2.5.4wangmy2021-10-141-2/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 2021.10.04 -- Version 2.5.4 Antonio Quartulli (3): route.c: pass the right parameter to IN6_IS_ADDR_UNSPECIFIED configure: search also for rst2{man, html}.py networking: add networking API net_addr_ll_set() and use it on Linux Arne Schwabe (1): Move examples into openvpn-examples(5) man page David Korczynski (1): Fix argv leaks in add_route() and add_route_ipv6() David Sommerseth (2): doc: Use generic rules for man/html generation man: Clarify IV_HWADDR Gert Doering (1): Add error reporting to get_console_input_win32(). Lev Stipakov (3): Fix console prompts with redirected log Add building man page on Windows GitHub Actions: remove Ubuntu 16.04 environment Max Fillinger (1): Update Fox e-mail address in copyright notices Selva Nair (1): Minor doc correction: tls-crypt-v2 key generation Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netplan: do not use -WerrorAlexander Kanavin2021-10-143-3/+31
| | | | | | | This addresses openssl 3.x deprecation warnings turning into errors. Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* packagegroup-meta-networking: Remove nghttp2Khem Raj2021-10-141-1/+0
| | | | | | Its moved to oe-core Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: disable openssl PACKAGECONFIGAlexander Kanavin2021-10-141-1/+1
| | | | | | | Until upstream addresses openssl 3.x compatibility issues. Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openipmi: add a python 3.10 compatibility patchAlexander Kanavin2021-10-142-0/+42
| | | | | Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openflow: disable openssl PACKAGECONFIGAlexander Kanavin2021-10-141-1/+1
| | | | | | | Until upstream addresses openssl 3.x compatibility issues. Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* kronosnet: update 1.20 -> 1.22Alexander Kanavin2021-10-141-1/+1
| | | | | Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nghttp2: remove recipe as it is now in oe-coreAlexander Kanavin2021-10-142-63/+0
| | | | | Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: upgrade 4.14.7 -> 4.14.8Yi Zhao2021-10-081-2/+2
| | | | | | | | Release notes: https://www.samba.org/samba/history/samba-4.14.8.html Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cifs-utils: upgrade 6.13 -> 6.14zhengruoqin2021-09-301-1/+1
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* smcroute: Add missing pkgconfig inheritKhem Raj2021-09-271-1/+1
| | | | | | | | Fixes ../git/configure: line 5918: syntax error near unexpected token `libsystemd,' ../git/configure: line 5918: ` PKG_CHECK_MODULES(libsystemd, libsystemd, with_libsystemd=yes, true)' Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort: upgrade 2.9.18 -> 2.9.18.1wangmy2021-09-271-1/+1
| | | | | | | | | | snort 2.9.18.1 * snort/src/dynamic-preprocessors/dcerpc2/dce2_smb.c: Fixed possible memory corruption in SMB preprocessor. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* smcroute: upgrade 2.4.4 -> 2.5.3wangmy2021-09-271-1/+1
| | | | | | | | | | | | | v2.5.3 Changes New tests to verify add/del of IPv4/IPv6 routes in kernel MFC Fixes Fix #166: build warning with gcc 10.2.1: "comparison is always true due to limited range of data type" Fix build warning with --disable-mrdisc configure option Fix #167: cannot remove routes added with smcroutectl add, only affects add/del at runtime with smcroutectl, not .conf reload Fix #168: build problem on Debian/kFreeBSD, used wrong queue.h Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* README: update to main repoArmin Kuster2021-09-271-6/+3
| | | | | | | | | | | | The main repo is sourced from git://git.openembedded.org not github. Don't think oe-core.git exists. Lets be constent across all sub layers. Drop Revisions and Prioriiy from repo references as they are not used. Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* postfix: Add missing dependency on m4Khem Raj2021-09-241-1/+1
| | | | | | | Fixes | extract_cfg.sh: line 42: m4: command not found Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdma-core: Inherit pkgconfigKhem Raj2021-09-241-1/+1
| | | | | | | | fixes CMake Error at /home/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/core2-64-poky-linux/rdma-core/36.0-r0/recipe-sysroot-native/usr/share/cmake-3.21/Modules/FindPackageHandleStandardArgs.cmake:230 (message): | Could NOT find PkgConfig (missing: PKG_CONFIG_EXECUTABLE) Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: remove perllocal.pod when enable packageconfig[perl]Yi Zhao2021-09-241-0/+4
| | | | | | | | | | Fixes: ERROR: net-snmp-5.9.1-r0 do_package_qa: QA Issue: net-snmp-perl-modules contains perllocal.pod (/usr/lib/perl5/5.34.0/x86_64-linux/perllocal.pod), should not be installed [perllocalpod] ERROR: net-snmp-5.9.1-r0 do_package_qa: QA run found fatal errors. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: Inherit pkgconfigKhem Raj2021-09-241-1/+1
| | | | | | | Fixes Checking for program 'pkg-config' : not found Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosquitto: Inherit pkgconfigKhem Raj2021-09-241-1/+1
| | | | | | | Fixes logging.c:(.text+0x218): undefined reference to `dlt_register_app' Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntopng: Inherit pkgconfigKhem Raj2021-09-241-1/+1
| | | | | | | Fixes | make: *** No targets specified and no makefile found. Stop. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libldb: Inherit pkgconfigKhem Raj2021-09-241-1/+1
| | | | | | | | | | | | Fixes linking errors | ../../lib/tevent/tevent.h:1446:8: error: unknown type name 'pid_t' | pid_t *pid, | ^ | ../../lib/tevent/tevent.h:1525:8: error: unknown type name 'pid_t' | pid_t pid, | ^ Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fetchmail: Inherit pkgconfigKhem Raj2021-09-241-1/+1
| | | | | | | | | Fixes configure.ac:1: error: possibly undefined macro: dnl If this token and others are legitimate, please use m4_pattern_allow. See the Autoconf documentation. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* firewalld: Inherit pkgconfigKhem Raj2021-09-241-1/+1
| | | | | | | | | Fixes ../firewalld-0.9.4/configure: line 3408: pkg.m4: command not found ../firewalld-0.9.4/configure: line 3422: syntax error near unexpected token `0.16' ../firewalld-0.9.4/configure: line 3422: ` PKG_PROG_PKG_CONFIG(0.16)' Signed-off-by: Khem Raj <raj.khem@gmail.com>
* crda: Inherit pkgconfigKhem Raj2021-09-241-1/+1
| | | | | | | Fixes /bin/sh: pkg-config: command not found Signed-off-by: Khem Raj <raj.khem@gmail.com>
* blueman: Inherit pkgconfigKhem Raj2021-09-241-1/+1
| | | | | | | | Fixes ../blueman-2.2.1/configure: line 15660: syntax error near unexpected token `PYTHON,' ../blueman-2.2.1/configure: line 15660: `PKG_CHECK_MODULES(PYTHON, python-${PYTHON_VERSION})' Signed-off-by: Khem Raj <raj.khem@gmail.com>
* kronosnet: Inherit pkgconfigKhem Raj2021-09-241-1/+1
| | | | | | | Fixes configure.ac:32: error: possibly undefined macro: AC_MSG_ERROR Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libgnt: Inherit pkgconfigKhem Raj2021-09-241-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* postfix: Inherit pkgconfigKhem Raj2021-09-241-1/+1
| | | | | | It was part of default dependencies before Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nghttp2: upgrade 1.44.0 -> 1.45.1wangmy2021-09-241-1/+1
| | | | | | | | | build: Fix compile error with libressl build: Always include optional files to EXTRA_DIST build: Add missing cmake files to EXTRA_DIST Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: upgrade 4.14.5 -> 4.14.7Yi Zhao2021-09-241-2/+2
| | | | | | | | Changelog: https://www.samba.org/samba/history/samba-4.14.7.html Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rp-pppoe: Add configure cached variable via recipeKhem Raj2021-09-243-4/+2
| | | | | | | | These site files are only there for single recipe, move the data to recipe and use SITEINFO_ENDIANNESS to choose right option and pass it to configure Signed-off-by: Khem Raj <raj.khem@gmail.com>
* autossh: set precise BSD licensesArmin Kuster2021-09-241-2/+4
| | | | | | | | One file is BSD-1-Clause while another is BSD-4-Clause Set and check accourdingly Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* unbound: upgrade 1.12.0 -> 1.13.2zhengruoqin2021-09-141-1/+1
| | | | | | | | | | | | | | | | | | | | Features Merge PR #317: ZONEMD Zone Verification, with RFC 8976 support. ZONEMD records are checked for zones loaded as auth-zone, with DNSSEC if available. There is an added option zonemd-permissive-mode that makes it log but not fail wrong zones. With zonemd-reject-absence for an auth-zone the presence of a zonemd can be mandated for specific zones. Fix: Resolve interface names on control-interface too. Merge #470 from edevil: Allow configuration of persistent TCP connections. Fix #474: always_null and others inside view. Add that log-servfail prints an IP address and more information about one of the last failures for that query. Merge #478: Allow configuration of TCP timeout while waiting for response. Add ./configure --with-deprecate-rsa-1024 that turns off RSA 1024. Move the NSEC3 max iterations count in line with the 150 value used by BIND, Knot and PowerDNS. This sets the default value for it in the configuration to 150 for all key sizes. zonemd-check: yesno option, default no, enables the processing of ZONEMD records for that zone. Merge #486 by fobster: Make VAL_MAX_RESTART_COUNT configurable. Merge PR #491: Add SVCB and HTTPS types and handling according to draft-ietf-dnsop-svcb-https. Introduce 'http-user-agent:' and 'hide-http-user-agent:' options. Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dnsmasq: upgrade 2.85 -> 2.86wangmy2021-09-142-8/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | version 2.86 Handle DHCPREBIND requests in the DHCPv6 server code. Thanks to Aichun Li for spotting this omission, and the initial patch. Fix bug which caused dnsmasq to lose track of processes forked to handle TCP DNS connections under heavy load. The code checked that at least one free process table slot was available before listening on TCP sockets, but didn't take into account that more than one TCP connection could arrive, so that check was not sufficient to ensure that there would be slots for all new processes. It compounded this error by silently failing to store the process when it did run out of slots. Even when this bug is triggered, all the right things happen, and answers are still returned. Only under very exceptional circumstances, does the bug manifest itself: see https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2021q2/014976.html Thanks to Tijs Van Buggenhout for finding the conditions under which the bug manifests itself, and then working out exactly what was going on. Major rewrite of the DNS server and domain handling code. This should be largely transparent, but it drastically improves performance and reduces memory foot-print when configuring large numbers domains of the form local=/adserver.com/ or local=/adserver.com/# Lookup times now grow as log-to-base-2 of the number of domains, rather than greater than linearly, as before. The change makes multiple addresses associated with a domain work address=/example.com/1.2.3.4 address=/example.com/5.6.7.8 It also handles multiple upstream servers for a domain better; using the same try/retry algorithms as non domain-specific servers. This also applies to DNSSEC-generated queries. Finally, some of the oldest and gnarliest code in dnsmasq has had a significant clean-up. It's far from perfect, but it _is_ better. Revise resource handling for number of concurrent DNS queries. This used to have a global limit, but that has a problem when using different servers for different upstream domains. Queries which are routed by domain to an upstream server which is not responding will build up and trigger the limit, which breaks DNS service for all other domains which could be handled by other servers. The change is to make the limit per server-group, where a server group is the set of servers configured for a particular domain. In the common case, where only default servers are declared, there is no effective change. Improve efficiency of DNSSEC. The sharing point for DNSSEC RR data used to be when it entered the cache, having been validated. After that queries requiring the KEY or DS records would share the cached values. There is a common case in dual-stack hosts that queries for A and AAAA records for the same domain are made simultaneously. If required keys were not in the cache, this would result in two requests being sent upstream for the same key data (and all the subsequent chain-of-trust queries.) Now we combine these requests and elide the duplicates, resulting in fewer queries upstream and better performance. To keep a better handle on what's going on, the "extra" logging mode has been modified to associate queries and answers for DNSSEC queries in the same way as ordinary queries. The requesting address and port have been removed from DNSSEC logging lines, since this is no longer strictly defined. Connection track mark based DNS query filtering. Thanks to Etan Kissling for implementing this It extends query filtering support beyond what is currently possible with the `--ipset` configuration option, by adding support for: 1) Specifying allowlists on a per-client basis, based on their associated Linux connection track mark. 2) Dynamic configuration of allowlists via Ubus. 3) Reporting when a DNS query resolves or is rejected via Ubus. 4) DNS name patterns containing wildcards. Disallowed queries are not forwarded; they are rejected with a REFUSED error code. Allow smaller than 64 prefix lengths in synth-domain, with caveats. --synth-domain=1234:4567::/56,example.com is now valid. Make domains generated by --synth-domain appear in replies when in authoritative mode. Ensure CAP_NET_ADMIN capability is available when conntrack is configured. Thanks to Yick Xie for spotting the lack of this. When --dhcp-hostsfile --dhcp-optsfile and --addn-hosts are given a directory as argument, define the order in which files within that directory are read (alphabetical order of filename). Thanks to Ed Wildgoose for the initial patch and motivation for this. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ndisc6: Upgrade 1.0.4 -> 1.0.5William A. Kennington III2021-09-143-158/+2
| | | | | | | | | | | | STABLE RELEASE 1.0.5: - Add --no-solicit option to skip sending the discovery packet. - Ignore multicast advertisements when discovery was sent as unicast - Since its point release, no need to use +git${SRCPV} in PV it can be absolute Signed-off-by: William A. Kennington III <wak@google.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: make sure snmpd always exit after displaying usageYi Zhao2021-09-142-0/+56
| | | | | | | | | | | | | | | | Currently, viewing the help text with snmpd -h results in snmpd being started in the background. $ snmpd -h Usage: snmpd [OPTIONS] [LISTENING ADDRESSES] [snip] $ ps -ef | grep snmpd root 1477 1 0 05:46 ? 00:00:00 snmpd -h Backport a patch to fix this issue. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: drop unused patchYi Zhao2021-09-141-1652/+0
| | | | | | | Remove backported patch systemd-support.patch. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-05 11:32:38 +0000