ExternalVendorCode/openwrt
1
0
Fork 0
mirror of https://github.com/openwrt/openwrt.git synced 2025-01-09 14:33:00 +00:00
Code Issues Actions 6 Packages Projects Releases Wiki Activity
e87c0d934c
openwrt/package/network/services/dnsmasq/Makefile

201 lines
6.3 KiB
Makefile
Raw Normal View History

upgrade to 2.57 SVN-Revision: 25576
2011-02-19 08:50:15 +00:00
#
dnsmasq: add host-specific lease time option for static hosts Enable setting a host-specific lease time for static hosts. The new option is called "leasetime" and the format is similar as for the default lease time: e.g. 12h, 3d, infinite Default lease time is used for all hosts for which there is no host-specific definition. The option is added to /etc/config/dhcp for the selected hosts: config host option name 'Nexus' option mac 'd8:50:66:55:59:7c' option ip '192.168.1.245' option leasetime '2h' It gets appended to /var/etc/dnsmasq.conf like this: dhcp-host=d8:50:66:55:59:7c,192.168.1.245,Nexus,2h Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi> SVN-Revision: 48801
2016-02-26 09:13:03 +00:00
# Copyright (C) 2006-2016 OpenWrt.org
credit where credit is due SVN-Revision: 4091
2006-06-27 00:35:46 +00:00
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#
add md5sums SVN-Revision: 405
2005-03-21 08:12:49 +00:00
nbd's makefile/menuconfig rewrite SVN-Revision: 307
2005-03-06 03:34:52 +00:00
include $(TOPDIR)/rules.mk
bring up to date with nbd's br2_test20.tar.bz2 SVN-Revision: 308
2005-03-06 03:53:29 +00:00
PKG_NAME:=dnsmasq
dnsmasq: Update to version 2.83 This fixes the following security problems in dnsmasq: * CVE-2020-25681: Dnsmasq versions before 2.83 is susceptible to a heap-based buffer overflow in sort_rrset() when DNSSEC is used. This can allow a remote attacker to write arbitrary data into target device's memory that can lead to memory corruption and other unexpected behaviors on the target device. * CVE-2020-25682: Dnsmasq versions before 2.83 is susceptible to buffer overflow in extract_name() function due to missing length check, when DNSSEC is enabled. This can allow a remote attacker to cause memory corruption on the target device. * CVE-2020-25683: Dnsmasq version before 2.83 is susceptible to a heap-based buffer overflow when DNSSEC is enabled. A remote attacker, who can create valid DNS replies, could use this flaw to cause an overflow in a heap- allocated memory. This flaw is caused by the lack of length checks in rtc1035.c:extract_name(), which could be abused to make the code execute memcpy() with a negative size in get_rdata() and cause a crash in Dnsmasq, resulting in a Denial of Service. * CVE-2020-25684: A lack of proper address/port check implemented in Dnsmasq version < 2.83 reply_query function makes forging replies easier to an off-path attacker. * CVE-2020-25685: A lack of query resource name (RRNAME) checks implemented in Dnsmasq's versions before 2.83 reply_query function allows remote attackers to spoof DNS traffic that can lead to DNS cache poisoning. * CVE-2020-25686: Multiple DNS query requests for the same resource name (RRNAME) by Dnsmasq versions before 2.83 allows for remote attackers to spoof DNS traffic, using a birthday attack (RFC 5452), that can lead to DNS cache poisoning. * CVE-2020-25687: Dnsmasq versions before 2.83 is vulnerable to a heap-based buffer overflow with large memcpy in sort_rrset() when DNSSEC is enabled. A remote attacker, who can create valid DNS replies, could use this flaw to cause an overflow in a heap-allocated memory. This flaw is caused by the lack of length checks in rtc1035.c:extract_name(), which could be abused to make the code execute memcpy() with a negative size in sort_rrset() and cause a crash in dnsmasq, resulting in a Denial of Service. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2021-01-10 23:33:07 +00:00
PKG_UPSTREAM_VERSION:=2.83
dnsmasq: ensure test and rc order as older than final releases Opkg treats text after a version number as higher than without: ~# opkg compare-versions "2.80rc1" "<<" "2.80"; echo $? 1 ~# opkg compare-versions "2.80rc1" ">>" "2.80"; echo $? 0 This causes opkg not offering final release as upgradable version, and even refusing to update, since it thinks the installed version is higher. This can be mitigated by adding ~ between the version and the text, as ~ will order as less than everything except itself. Since 'r' < 't', to make sure that test will be treated as lower than rc we add a second ~ before the test tag. That way, the ordering becomes 2.80~~test < 2.80~rc < 2.80 which then makes opkg properly treat prerelease versions as lower. Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com>
2019-02-17 12:04:40 +00:00
PKG_VERSION:=$(subst test,~~test,$(subst rc,~rc,$(PKG_UPSTREAM_VERSION)))
dnsmasq: Update to version 2.83 This fixes the following security problems in dnsmasq: * CVE-2020-25681: Dnsmasq versions before 2.83 is susceptible to a heap-based buffer overflow in sort_rrset() when DNSSEC is used. This can allow a remote attacker to write arbitrary data into target device's memory that can lead to memory corruption and other unexpected behaviors on the target device. * CVE-2020-25682: Dnsmasq versions before 2.83 is susceptible to buffer overflow in extract_name() function due to missing length check, when DNSSEC is enabled. This can allow a remote attacker to cause memory corruption on the target device. * CVE-2020-25683: Dnsmasq version before 2.83 is susceptible to a heap-based buffer overflow when DNSSEC is enabled. A remote attacker, who can create valid DNS replies, could use this flaw to cause an overflow in a heap- allocated memory. This flaw is caused by the lack of length checks in rtc1035.c:extract_name(), which could be abused to make the code execute memcpy() with a negative size in get_rdata() and cause a crash in Dnsmasq, resulting in a Denial of Service. * CVE-2020-25684: A lack of proper address/port check implemented in Dnsmasq version < 2.83 reply_query function makes forging replies easier to an off-path attacker. * CVE-2020-25685: A lack of query resource name (RRNAME) checks implemented in Dnsmasq's versions before 2.83 reply_query function allows remote attackers to spoof DNS traffic that can lead to DNS cache poisoning. * CVE-2020-25686: Multiple DNS query requests for the same resource name (RRNAME) by Dnsmasq versions before 2.83 allows for remote attackers to spoof DNS traffic, using a birthday attack (RFC 5452), that can lead to DNS cache poisoning. * CVE-2020-25687: Dnsmasq versions before 2.83 is vulnerable to a heap-based buffer overflow with large memcpy in sort_rrset() when DNSSEC is enabled. A remote attacker, who can create valid DNS replies, could use this flaw to cause an overflow in a heap-allocated memory. This flaw is caused by the lack of length checks in rtc1035.c:extract_name(), which could be abused to make the code execute memcpy() with a negative size in sort_rrset() and cause a crash in dnsmasq, resulting in a Denial of Service. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2021-01-10 23:33:07 +00:00
PKG_RELEASE:=1
add md5sums SVN-Revision: 405
2005-03-21 08:12:49 +00:00
dnsmasq: ensure test and rc order as older than final releases Opkg treats text after a version number as higher than without: ~# opkg compare-versions "2.80rc1" "<<" "2.80"; echo $? 1 ~# opkg compare-versions "2.80rc1" ">>" "2.80"; echo $? 0 This causes opkg not offering final release as upgradable version, and even refusing to update, since it thinks the installed version is higher. This can be mitigated by adding ~ between the version and the text, as ~ will order as less than everything except itself. Since 'r' < 't', to make sure that test will be treated as lower than rc we add a second ~ before the test tag. That way, the ordering becomes 2.80~~test < 2.80~rc < 2.80 which then makes opkg properly treat prerelease versions as lower. Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com>
2019-02-17 12:04:40 +00:00
PKG_SOURCE:=$(PKG_NAME)-$(PKG_UPSTREAM_VERSION).tar.xz
dnsmasq: bump to v2.81 Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2020-04-12 07:55:26 +00:00
PKG_SOURCE_URL:=http://thekelleys.org.uk/dnsmasq
dnsmasq: Update to version 2.83 This fixes the following security problems in dnsmasq: * CVE-2020-25681: Dnsmasq versions before 2.83 is susceptible to a heap-based buffer overflow in sort_rrset() when DNSSEC is used. This can allow a remote attacker to write arbitrary data into target device's memory that can lead to memory corruption and other unexpected behaviors on the target device. * CVE-2020-25682: Dnsmasq versions before 2.83 is susceptible to buffer overflow in extract_name() function due to missing length check, when DNSSEC is enabled. This can allow a remote attacker to cause memory corruption on the target device. * CVE-2020-25683: Dnsmasq version before 2.83 is susceptible to a heap-based buffer overflow when DNSSEC is enabled. A remote attacker, who can create valid DNS replies, could use this flaw to cause an overflow in a heap- allocated memory. This flaw is caused by the lack of length checks in rtc1035.c:extract_name(), which could be abused to make the code execute memcpy() with a negative size in get_rdata() and cause a crash in Dnsmasq, resulting in a Denial of Service. * CVE-2020-25684: A lack of proper address/port check implemented in Dnsmasq version < 2.83 reply_query function makes forging replies easier to an off-path attacker. * CVE-2020-25685: A lack of query resource name (RRNAME) checks implemented in Dnsmasq's versions before 2.83 reply_query function allows remote attackers to spoof DNS traffic that can lead to DNS cache poisoning. * CVE-2020-25686: Multiple DNS query requests for the same resource name (RRNAME) by Dnsmasq versions before 2.83 allows for remote attackers to spoof DNS traffic, using a birthday attack (RFC 5452), that can lead to DNS cache poisoning. * CVE-2020-25687: Dnsmasq versions before 2.83 is vulnerable to a heap-based buffer overflow with large memcpy in sort_rrset() when DNSSEC is enabled. A remote attacker, who can create valid DNS replies, could use this flaw to cause an overflow in a heap-allocated memory. This flaw is caused by the lack of length checks in rtc1035.c:extract_name(), which could be abused to make the code execute memcpy() with a negative size in sort_rrset() and cause a crash in dnsmasq, resulting in a Denial of Service. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2021-01-10 23:33:07 +00:00
PKG_HASH:=ffc1f7e8b05e22d910b9a71d09f1128197292766dc7c54cb7018a1b2c3af4aea
dnsmasq: Bump to 2.62, add DHCPv6 variant SVN-Revision: 32764
2012-07-17 11:48:27 +00:00
license info - revert r43155 turns out that r43155 adds duplicate info. Signed-off-by: John Crispin <blogic@openwrt.org> SVN-Revision: 43167
2014-11-03 09:56:44 +00:00
PKG_LICENSE:=GPL-2.0
PKG_LICENSE_FILES:=COPYING
add PKG_CPE_ID ids to package and tools CPE ids helps to tracks CVE in packages. https://cpe.mitre.org/specification/ Thanks to swalker for CPE to package mapping and keep tracking CVEs. Acked-by: Jo-Philipp Wich <jo@mein.io> Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
2017-09-28 02:55:46 +00:00
PKG_CPE_ID:=cpe:/a:thekelleys:dnsmasq
licensing: Add licensing metadata to many packages Two new variables are introduces to many packages, namely PKG_LICENSE and PKG_LICENSE_FILES - there may be more than one license applied to packages, and these are listed in the PKG_LICENSE variable and separated by spaces. All relevant license files are also added to the PKG_LICENSE_FILES variable, also space separated. The licensing metadata is put into the bin/<platform>/packages/Packages file for later parsing. A script for that is on it's way! SVN-Revision: 33861
2012-10-19 15:34:28 +00:00
dnsmasq: ensure test and rc order as older than final releases Opkg treats text after a version number as higher than without: ~# opkg compare-versions "2.80rc1" "<<" "2.80"; echo $? 1 ~# opkg compare-versions "2.80rc1" ">>" "2.80"; echo $? 0 This causes opkg not offering final release as upgradable version, and even refusing to update, since it thinks the installed version is higher. This can be mitigated by adding ~ between the version and the text, as ~ will order as less than everything except itself. Since 'r' < 't', to make sure that test will be treated as lower than rc we add a second ~ before the test tag. That way, the ordering becomes 2.80~~test < 2.80~rc < 2.80 which then makes opkg properly treat prerelease versions as lower. Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com>
2019-02-17 12:04:40 +00:00
PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_NAME)-$(PKG_UPSTREAM_VERSION)
package/dnsmasq: update to 2.59 (thanks to Raphael Huck) SVN-Revision: 29329
2011-11-25 00:53:13 +00:00
PKG_INSTALL:=1
dnsmasq: enable parallel builds SVN-Revision: 33416
2012-09-15 11:36:58 +00:00
PKG_BUILD_PARALLEL:=1
dnsmasq: Activate PIE by default This activates PIE ASLR support by default when the regular option is selected. This increases the binary size by 37% uncompressed and 18% compressed on MIPS BE. old: 146,933 /usr/sbin/dnsmasq 101,837 dnsmasq_2.80-14_mips_24kc.ipk new: 202,020 /usr/sbin/dnsmasq 120,577 dnsmasq_2.80-14_mips_24kc.ipk Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> Acked-by: Petr Štetiar <ynezz@true.cz>
2019-10-27 13:48:24 +00:00
PKG_ASLR_PIE_REGULAR:=1
dnsmasq: add DHCP build switch support in full variant Add config option which allows to enable/disable DHCP support at compile time. Make DHCPv6 support dependant on DHCP support as DHCPv6 support implies having DHCP support. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2017-12-10 15:25:18 +00:00
PKG_CONFIG_DEPENDS:= CONFIG_PACKAGE_dnsmasq_$(BUILD_VARIANT)_dhcp \
CONFIG_PACKAGE_dnsmasq_$(BUILD_VARIANT)_dhcpv6 \
dnsmasq: fix dependency problems of the dnsmasq-full variant. This patch tries to - Let the DHCPv6 feature depend on CONFIG_IPV6. - Conditionally select libnettle, kmod-ipv6, kmod-ipt-ipset only if the corresponding features are enabled. - Install `trust-anchors.conf` only if DNSSEC is selected. - Add PKG_CONFIG_DEPENDS for the configurable options. - Add a patch to let the Makefile of dnsmasq be aware of changes in COPTS variable. Big thanks goes to Frank Schäfer <fschaefer.oss@googlemail.com> for providing necessary information on connections and dependency relations between these CONFIGs and packages. Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> SVN-Revision: 43851
2015-01-05 13:03:48 +00:00
CONFIG_PACKAGE_dnsmasq_$(BUILD_VARIANT)_dnssec \
CONFIG_PACKAGE_dnsmasq_$(BUILD_VARIANT)_auth \
dnsmasq: Add conntrack support in the full variant Conntrack support reads the connection track mark associated with incoming DNS queries and sets the same mark value on the upstream forwarded DNS query. This can be usefull to track traffic generated by dnsmasq to associate it with the clients who generate the queries, usefull for bandwidth accouting and firewall. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2016-04-27 09:14:01 +00:00
CONFIG_PACKAGE_dnsmasq_$(BUILD_VARIANT)_ipset \
dnsmasq: Add broken realtime clock build switch in full variant By default dnsmasq uses the time function; which returns the time since Epoch; to retrieve the current time. On boards which have no realtime clock this can lead to side effects when the time is synced via ntp as the "time wrap" forces dhcp leases to be considered as expired. By enabling the broken realtime clock build switch dnsmasq uses the times utility which returns the number of clock tick. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com> [Jo-Philipp Wich: change symbol name, add sym to PKG_CONFIG_DEPENDS] Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2016-06-29 12:29:48 +00:00
CONFIG_PACKAGE_dnsmasq_$(BUILD_VARIANT)_conntrack \
dnsmasq: make NO_ID optional in full variant Permit users of the full variant to disable the NO_ID *.bind pseudo domain masking. Defaulted 'on' in all variants. Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
2016-09-09 08:03:27 +00:00
CONFIG_PACKAGE_dnsmasq_$(BUILD_VARIANT)_noid \
dnsmasq: allow building without tftp server support It saves 2871 bytes on package size while 4 bytes on memory size. Signed-off-by: Rosy Song <rosysong@rosinson.com>
2019-01-07 01:52:43 +00:00
CONFIG_PACKAGE_dnsmasq_$(BUILD_VARIANT)_broken_rtc \
CONFIG_PACKAGE_dnsmasq_$(BUILD_VARIANT)_tftp
nbd's makefile/menuconfig rewrite SVN-Revision: 307
2005-03-06 03:34:52 +00:00
add INCLUDE_DIR variable for $(TOPDIR)/include SVN-Revision: 4033
2006-06-21 02:32:39 +00:00
include $(INCLUDE_DIR)/package.mk
bring up to date with nbd's br2_test20.tar.bz2 SVN-Revision: 308
2005-03-06 03:53:29 +00:00
dnsmasq: Bump to 2.62, add DHCPv6 variant SVN-Revision: 32764
2012-07-17 11:48:27 +00:00
define Package/dnsmasq/Default
standardize Makefile, change section from base to net and category to "base system" SVN-Revision: 4820
2006-09-23 13:41:42 +00:00
SECTION:=net
CATEGORY:=Base system
dnsmasq: various house-keeping updates * Add Authoritative DNS and IPSET to full variant * Remove some bloat from IPSET support * Reintroduce "DHCP no address warning"-patch Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 41246
2014-06-18 10:04:34 +00:00
TITLE:=DNS and DHCP server
standardize Makefile, change section from base to net and category to "base system" SVN-Revision: 4820
2006-09-23 13:41:42 +00:00
URL:=http://www.thekelleys.org.uk/dnsmasq/
dnsmasq: add ubus notifications for new leases Signed-off-by: John Crispin <john@phrozen.org>
2017-08-22 14:43:02 +00:00
DEPENDS:=+libubus
dnsmasq: run as dedicated UID/GID Running dnsmasq in a dedicated user/group allows matching its outgoing traffic more easily using iptables' owner match. Add UID/GID to the package metadata and append the user/group parameters to the init script. Signed-off-by: Daniel Golle <daniel@makrotopia.org> SVN-Revision: 49252
2016-04-26 11:44:10 +00:00
USERID:=dnsmasq=453:dnsmasq=453
convert to new template SVN-Revision: 3744
2006-05-09 23:19:52 +00:00
endef
dnsmasq: Bump to 2.62, add DHCPv6 variant SVN-Revision: 32764
2012-07-17 11:48:27 +00:00
define Package/dnsmasq
$(call Package/dnsmasq/Default)
VARIANT:=nodhcpv6
endef
define Package/dnsmasq-dhcpv6
$(call Package/dnsmasq/Default)
TITLE += (with DHCPv6 support)
dnsmasq: add ubus notifications for new leases Signed-off-by: John Crispin <john@phrozen.org>
2017-08-22 14:43:02 +00:00
DEPENDS+=@IPV6
dnsmasq: Bump to 2.62, add DHCPv6 variant SVN-Revision: 32764
2012-07-17 11:48:27 +00:00
VARIANT:=dhcpv6
dnsmasq: allow dnsmasq variants to be included in image The dnsmasq variants should provide dnsmasq, otherwise it is impossible to include them in the image. This change allows one to have CONFIG_PACKAGE_dnsmasq=m and CONFIG_PACKAGE_dnsmasq-full=y, e.g. because you want DNSSEC support, or IPSETs suport on your 3000-devices fleet ;-) Signed-off-by: Henrique de Moraes Holschuh <henrique@nic.br>
2018-08-27 11:31:29 +00:00
PROVIDES:=dnsmasq
dnsmasq: Bump to 2.62, add DHCPv6 variant SVN-Revision: 32764
2012-07-17 11:48:27 +00:00
endef
dnsmasq: Add a full variant This variant includes support for DHCPv6 and DNSSEC. DNSSEC adds a dependency on libnettle. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41244
2014-06-18 10:04:25 +00:00
define Package/dnsmasq-full
$(call Package/dnsmasq/Default)
dnsmasq: make NO_ID optional in full variant Permit users of the full variant to disable the NO_ID *.bind pseudo domain masking. Defaulted 'on' in all variants. Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
2016-09-09 08:03:27 +00:00
TITLE += (with DNSSEC, DHCPv6, Auth DNS, IPset, Conntrack, NO_ID enabled by default)
dnsmasq: add ubus notifications for new leases Signed-off-by: John Crispin <john@phrozen.org>
2017-08-22 14:43:02 +00:00
DEPENDS+=+PACKAGE_dnsmasq_full_dnssec:libnettle \
dnsmasq: Add conntrack support in the full variant Conntrack support reads the connection track mark associated with incoming DNS queries and sets the same mark value on the upstream forwarded DNS query. This can be usefull to track traffic generated by dnsmasq to associate it with the clients who generate the queries, usefull for bandwidth accouting and firewall. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2016-04-27 09:14:01 +00:00
+PACKAGE_dnsmasq_full_ipset:kmod-ipt-ipset \
+PACKAGE_dnsmasq_full_conntrack:libnetfilter-conntrack
dnsmasq: Add a full variant This variant includes support for DHCPv6 and DNSSEC. DNSSEC adds a dependency on libnettle. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41244
2014-06-18 10:04:25 +00:00
VARIANT:=full
dnsmasq: allow dnsmasq variants to be included in image The dnsmasq variants should provide dnsmasq, otherwise it is impossible to include them in the image. This change allows one to have CONFIG_PACKAGE_dnsmasq=m and CONFIG_PACKAGE_dnsmasq-full=y, e.g. because you want DNSSEC support, or IPSETs suport on your 3000-devices fleet ;-) Signed-off-by: Henrique de Moraes Holschuh <henrique@nic.br>
2018-08-27 11:31:29 +00:00
PROVIDES:=dnsmasq
dnsmasq: Add a full variant This variant includes support for DHCPv6 and DNSSEC. DNSSEC adds a dependency on libnettle. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41244
2014-06-18 10:04:25 +00:00
endef
move package description to a separate definition, remove it when DESCRIPTION=TITLE SVN-Revision: 8659
2007-09-07 08:34:51 +00:00
define Package/dnsmasq/description
dnsmasq: update to 2.58 patch by Raphael Huck. SVN-Revision: 28333
2011-09-30 12:55:23 +00:00
It is intended to provide coupled DNS and DHCP service to a LAN.
move package description to a separate definition, remove it when DESCRIPTION=TITLE SVN-Revision: 8659
2007-09-07 08:34:51 +00:00
endef
dnsmasq: Bump to 2.62, add DHCPv6 variant SVN-Revision: 32764
2012-07-17 11:48:27 +00:00
define Package/dnsmasq-dhcpv6/description
$(call Package/dnsmasq/description)
This is a variant with DHCPv6 support
endef
dnsmasq: Add a full variant This variant includes support for DHCPv6 and DNSSEC. DNSSEC adds a dependency on libnettle. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41244
2014-06-18 10:04:25 +00:00
define Package/dnsmasq-full/description
$(call Package/dnsmasq/description)
dnsmasq: add DHCP build switch support in full variant Add config option which allows to enable/disable DHCP support at compile time. Make DHCPv6 support dependant on DHCP support as DHCPv6 support implies having DHCP support. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2017-12-10 15:25:18 +00:00
This is a fully configurable variant with DHCPv4, DHCPv6, DNSSEC, Authoritative DNS
and IPset, Conntrack support & NO_ID enabled by default.
dnsmasq: Add a full variant This variant includes support for DHCPv6 and DNSSEC. DNSSEC adds a dependency on libnettle. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41244
2014-06-18 10:04:25 +00:00
endef
add dnsmasq config file to the conffiles section SVN-Revision: 14398
2009-02-03 22:27:44 +00:00
define Package/dnsmasq/conffiles
/etc/config/dhcp
Add default /etc/dnsmasq.conf dnsmasq allows adding of arbitrary SRV/PTR/TXT/CNAME records. However, those options sometimes can not be passed as command-line arguments due to excess length. This patch tries to solve this problem: 1. Provide /etc/dnsmasq.conf file with comments about adding SRV/PTR/TXT/CNAME records. 2. Add this file to conffiles list so it is preserver during backup/restore or system upgrade. If someone needs a lot of custom records, default configuration file can be edited. Since manual pages and documentation is not installed, provided comments should be enough to figure out option syntax. Signed-off-by: Alexey I. Froloff <raorn@altlinux.org> SVN-Revision: 17663
2009-09-21 13:25:11 +00:00
/etc/dnsmasq.conf
dnsmasq: add /etc/dnsmasq.d/ to conffiles This directory can hold configuration-snippets which should also included in the backup. Signed-off-by: Sven Roederer <devel-sven@geroedel.de>
2020-04-24 13:43:49 +00:00
/etc/dnsmasq.d/
add dnsmasq config file to the conffiles section SVN-Revision: 14398
2009-02-03 22:27:44 +00:00
endef
dnsmasq: fix dependency problems of the dnsmasq-full variant. This patch tries to - Let the DHCPv6 feature depend on CONFIG_IPV6. - Conditionally select libnettle, kmod-ipv6, kmod-ipt-ipset only if the corresponding features are enabled. - Install `trust-anchors.conf` only if DNSSEC is selected. - Add PKG_CONFIG_DEPENDS for the configurable options. - Add a patch to let the Makefile of dnsmasq be aware of changes in COPTS variable. Big thanks goes to Frank Schäfer <fschaefer.oss@googlemail.com> for providing necessary information on connections and dependency relations between these CONFIGs and packages. Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> SVN-Revision: 43851
2015-01-05 13:03:48 +00:00
define Package/dnsmasq-full/config
if PACKAGE_dnsmasq-full
dnsmasq: add DHCP build switch support in full variant Add config option which allows to enable/disable DHCP support at compile time. Make DHCPv6 support dependant on DHCP support as DHCPv6 support implies having DHCP support. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2017-12-10 15:25:18 +00:00
config PACKAGE_dnsmasq_full_dhcp
bool "Build with DHCP support."
default y
dnsmasq: fix dependency problems of the dnsmasq-full variant. This patch tries to - Let the DHCPv6 feature depend on CONFIG_IPV6. - Conditionally select libnettle, kmod-ipv6, kmod-ipt-ipset only if the corresponding features are enabled. - Install `trust-anchors.conf` only if DNSSEC is selected. - Add PKG_CONFIG_DEPENDS for the configurable options. - Add a patch to let the Makefile of dnsmasq be aware of changes in COPTS variable. Big thanks goes to Frank Schäfer <fschaefer.oss@googlemail.com> for providing necessary information on connections and dependency relations between these CONFIGs and packages. Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> SVN-Revision: 43851
2015-01-05 13:03:48 +00:00
config PACKAGE_dnsmasq_full_dhcpv6
bool "Build with DHCPv6 support."
dnsmasq: add DHCP build switch support in full variant Add config option which allows to enable/disable DHCP support at compile time. Make DHCPv6 support dependant on DHCP support as DHCPv6 support implies having DHCP support. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2017-12-10 15:25:18 +00:00
depends on IPV6 && PACKAGE_dnsmasq_full_dhcp
dnsmasq: fix dependency problems of the dnsmasq-full variant. This patch tries to - Let the DHCPv6 feature depend on CONFIG_IPV6. - Conditionally select libnettle, kmod-ipv6, kmod-ipt-ipset only if the corresponding features are enabled. - Install `trust-anchors.conf` only if DNSSEC is selected. - Add PKG_CONFIG_DEPENDS for the configurable options. - Add a patch to let the Makefile of dnsmasq be aware of changes in COPTS variable. Big thanks goes to Frank Schäfer <fschaefer.oss@googlemail.com> for providing necessary information on connections and dependency relations between these CONFIGs and packages. Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> SVN-Revision: 43851
2015-01-05 13:03:48 +00:00
default y
config PACKAGE_dnsmasq_full_dnssec
bool "Build with DNSSEC support."
default y
config PACKAGE_dnsmasq_full_auth
bool "Build with the facility to act as an authoritative DNS server."
default y
config PACKAGE_dnsmasq_full_ipset
bool "Build with IPset support."
default y
dnsmasq: Add conntrack support in the full variant Conntrack support reads the connection track mark associated with incoming DNS queries and sets the same mark value on the upstream forwarded DNS query. This can be usefull to track traffic generated by dnsmasq to associate it with the clients who generate the queries, usefull for bandwidth accouting and firewall. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2016-04-27 09:14:01 +00:00
config PACKAGE_dnsmasq_full_conntrack
bool "Build with Conntrack support."
default y
dnsmasq: make NO_ID optional in full variant Permit users of the full variant to disable the NO_ID *.bind pseudo domain masking. Defaulted 'on' in all variants. Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
2016-09-09 08:03:27 +00:00
config PACKAGE_dnsmasq_full_noid
bool "Build with NO_ID. (hide *.bind pseudo domain)"
default y
dnsmasq: Add broken realtime clock build switch in full variant By default dnsmasq uses the time function; which returns the time since Epoch; to retrieve the current time. On boards which have no realtime clock this can lead to side effects when the time is synced via ntp as the "time wrap" forces dhcp leases to be considered as expired. By enabling the broken realtime clock build switch dnsmasq uses the times utility which returns the number of clock tick. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com> [Jo-Philipp Wich: change symbol name, add sym to PKG_CONFIG_DEPENDS] Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2016-06-29 12:29:48 +00:00
config PACKAGE_dnsmasq_full_broken_rtc
bool "Build with HAVE_BROKEN_RTC."
default n
dnsmasq: allow building without tftp server support It saves 2871 bytes on package size while 4 bytes on memory size. Signed-off-by: Rosy Song <rosysong@rosinson.com>
2019-01-07 01:52:43 +00:00
config PACKAGE_dnsmasq_full_tftp
bool "Build with TFTP server support."
default y
dnsmasq: fix dependency problems of the dnsmasq-full variant. This patch tries to - Let the DHCPv6 feature depend on CONFIG_IPV6. - Conditionally select libnettle, kmod-ipv6, kmod-ipt-ipset only if the corresponding features are enabled. - Install `trust-anchors.conf` only if DNSSEC is selected. - Add PKG_CONFIG_DEPENDS for the configurable options. - Add a patch to let the Makefile of dnsmasq be aware of changes in COPTS variable. Big thanks goes to Frank Schäfer <fschaefer.oss@googlemail.com> for providing necessary information on connections and dependency relations between these CONFIGs and packages. Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> SVN-Revision: 43851
2015-01-05 13:03:48 +00:00
endif
dnsmasq: allow de-selecting features from -full variant. Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> SVN-Revision: 43733
2014-12-17 05:59:12 +00:00
endef
dnsmasq: Bump to 2.62, add DHCPv6 variant SVN-Revision: 32764
2012-07-17 11:48:27 +00:00
Package/dnsmasq-dhcpv6/conffiles = $(Package/dnsmasq/conffiles)
dnsmasq: Add a full variant This variant includes support for DHCPv6 and DNSSEC. DNSSEC adds a dependency on libnettle. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41244
2014-06-18 10:04:25 +00:00
Package/dnsmasq-full/conffiles = $(Package/dnsmasq/conffiles)
dnsmasq: Bump to 2.62, add DHCPv6 variant SVN-Revision: 32764
2012-07-17 11:48:27 +00:00
dnsmasq: Activate LTO This decreases the binary size when PIE ASLR is activated by 8% on MIPS BE. old: 202,020 /usr/sbin/dnsmasq new: 185,676 /usr/sbin/dnsmasq Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2019-10-27 20:17:39 +00:00
TARGET_CFLAGS += -flto
TARGET_LDFLAGS += -flto=jobserver
dnsmasq: use COPTS for compile time options As documented in config.h. Doing otherwise will break dnsmasq's pkg-wrapper script to find its libs to link to. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41241
2014-06-18 10:04:02 +00:00
dnsmasq: bump to v2.81rc1 1st release candidate for v2.81 after 18 months. Refresh patches & remove all upstreamed leaving: 110-ipset-remove-old-kernel-support.patch Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2019-03-09 08:40:57 +00:00
COPTS = -DHAVE_UBUS -DHAVE_POLL_H \
dnsmasq: bump to dnsmasq v2.80test5 Refresh patches Remove 240-ubus patch as upstream accepted. Add uci option ubus which allows to enable/disable ubus support (enabled by default) Upstream commits since last bump: da8b651 Implement --address=/example.com/# c5db8f9 Tidy 7f876b64c22b2b18412e2e3d8506ee33e42db7c 974a6d0 Add --caa-record b758b67 Improve logging of RRs from --dns-rr. 9bafdc6 Tidy up file parsing code. 97f876b Properly deal with unaligned addresses in DHCPv6 packets. cbfbd17 Fix broken DNSSEC records in previous. b6f926f Don't return NXDOMAIN to empty non-terminals. c822620 Add --dhcp-name-match 397c050 Handle case of --auth-zone but no --auth-server. 1682d15 Add missing EDNS0 section. EDNS0 section missing in replies to EDNS0-containing queries where answer generated from --local=/<domain>/ dd33e98 Fix crash parsing a --synth-domain with no prefix. Problem introduced in 2.79/6b2b564ac34cb3c862f168e6b1457f9f0b9ca69c c16d966 Add copyright to src/metrics.h 1dfed16 Remove C99 only code. 6f835ed Format fixes - ubus.c 9d6fd17 dnsmasq.c fix OPT_UBUS option usage 8c1b6a5 New metrics and ubus files. 8dcdb33 Add --enable-ubus option. aba8bbb Add collection of metrics caf4d57 Add OpenWRT ubus patch Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2018-09-05 13:39:39 +00:00
$(if $(CONFIG_IPV6),,-DNO_IPV6)
dnsmasq: use -ffunction-sections, -fdata-sections and --gc-sections, saves 8k uncompressed SVN-Revision: 25827
2011-03-02 12:47:57 +00:00
dnsmasq: Bump to 2.62, add DHCPv6 variant SVN-Revision: 32764
2012-07-17 11:48:27 +00:00
ifeq ($(BUILD_VARIANT),nodhcpv6)
dnsmasq: use COPTS for compile time options As documented in config.h. Doing otherwise will break dnsmasq's pkg-wrapper script to find its libs to link to. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41241
2014-06-18 10:04:02 +00:00
COPTS += -DNO_DHCP6
dnsmasq: Bump to 2.62, add DHCPv6 variant SVN-Revision: 32764
2012-07-17 11:48:27 +00:00
endif
dnsmasq: Add a full variant This variant includes support for DHCPv6 and DNSSEC. DNSSEC adds a dependency on libnettle. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41244
2014-06-18 10:04:25 +00:00
ifeq ($(BUILD_VARIANT),full)
dnsmasq: add DHCP build switch support in full variant Add config option which allows to enable/disable DHCP support at compile time. Make DHCPv6 support dependant on DHCP support as DHCPv6 support implies having DHCP support. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2017-12-10 15:25:18 +00:00
COPTS += $(if $(CONFIG_PACKAGE_dnsmasq_$(BUILD_VARIANT)_dhcp),,-DNO_DHCP) \
$(if $(CONFIG_PACKAGE_dnsmasq_$(BUILD_VARIANT)_dhcpv6),,-DNO_DHCP6) \
dnsmasq: allow de-selecting features from -full variant. Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> SVN-Revision: 43733
2014-12-17 05:59:12 +00:00
$(if $(CONFIG_PACKAGE_dnsmasq_$(BUILD_VARIANT)_dnssec),-DHAVE_DNSSEC) \
$(if $(CONFIG_PACKAGE_dnsmasq_$(BUILD_VARIANT)_auth),,-DNO_AUTH) \
dnsmasq: Add conntrack support in the full variant Conntrack support reads the connection track mark associated with incoming DNS queries and sets the same mark value on the upstream forwarded DNS query. This can be usefull to track traffic generated by dnsmasq to associate it with the clients who generate the queries, usefull for bandwidth accouting and firewall. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2016-04-27 09:14:01 +00:00
$(if $(CONFIG_PACKAGE_dnsmasq_$(BUILD_VARIANT)_ipset),,-DNO_IPSET) \
dnsmasq: Add broken realtime clock build switch in full variant By default dnsmasq uses the time function; which returns the time since Epoch; to retrieve the current time. On boards which have no realtime clock this can lead to side effects when the time is synced via ntp as the "time wrap" forces dhcp leases to be considered as expired. By enabling the broken realtime clock build switch dnsmasq uses the times utility which returns the number of clock tick. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com> [Jo-Philipp Wich: change symbol name, add sym to PKG_CONFIG_DEPENDS] Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2016-06-29 12:29:48 +00:00
$(if $(CONFIG_PACKAGE_dnsmasq_$(BUILD_VARIANT)_conntrack),-DHAVE_CONNTRACK,) \
dnsmasq: make NO_ID optional in full variant Permit users of the full variant to disable the NO_ID *.bind pseudo domain masking. Defaulted 'on' in all variants. Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
2016-09-09 08:03:27 +00:00
$(if $(CONFIG_PACKAGE_dnsmasq_$(BUILD_VARIANT)_noid),-DNO_ID,) \
dnsmasq: allow building without tftp server support It saves 2871 bytes on package size while 4 bytes on memory size. Signed-off-by: Rosy Song <rosysong@rosinson.com>
2019-01-07 01:52:43 +00:00
$(if $(CONFIG_PACKAGE_dnsmasq_$(BUILD_VARIANT)_broken_rtc),-DHAVE_BROKEN_RTC) \
$(if $(CONFIG_PACKAGE_dnsmasq_$(BUILD_VARIANT)_tftp),,-DNO_TFTP)
dnsmasq: Add a full variant This variant includes support for DHCPv6 and DNSSEC. DNSSEC adds a dependency on libnettle. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41244
2014-06-18 10:04:25 +00:00
COPTS += $(if $(CONFIG_LIBNETTLE_MINI),-DNO_GMP,)
dnsmasq: various house-keeping updates * Add Authoritative DNS and IPSET to full variant * Remove some bloat from IPSET support * Reintroduce "DHCP no address warning"-patch Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 41246
2014-06-18 10:04:34 +00:00
else
dnsmasq: make NO_ID optional in full variant Permit users of the full variant to disable the NO_ID *.bind pseudo domain masking. Defaulted 'on' in all variants. Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
2016-09-09 08:03:27 +00:00
COPTS += -DNO_AUTH -DNO_IPSET -DNO_ID
dnsmasq: Add a full variant This variant includes support for DHCPv6 and DNSSEC. DNSSEC adds a dependency on libnettle. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41244
2014-06-18 10:04:25 +00:00
endif
package/dnsmasq: update to 2.59 (thanks to Raphael Huck) SVN-Revision: 29329
2011-11-25 00:53:13 +00:00
MAKE_FLAGS := \
$(TARGET_CONFIGURE_OPTS) \
dnsmasq: Pass TARGET_CPPFLAGS to Makefile With the introduction of the ubus notifications, we would now fail building dnsmasq with external toolchains that don't automatically search for headers. Pass TARGET_CPPFLAGS to the Makefile to resolve that. Fixes: 34a206bc1194 ("dnsmasq: add ubus notifications for new leases") Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
2017-09-16 23:27:37 +00:00
CFLAGS="$(TARGET_CFLAGS) $(TARGET_CPPFLAGS)" \
dnsmasq: respect target's LDFLAGS Append local flags, don't overwrite. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41242
2014-06-18 10:04:17 +00:00
LDFLAGS="$(TARGET_LDFLAGS)" \
dnsmasq: use COPTS for compile time options As documented in config.h. Doing otherwise will break dnsmasq's pkg-wrapper script to find its libs to link to. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41241
2014-06-18 10:04:02 +00:00
COPTS="$(COPTS)" \
package/dnsmasq: update to 2.59 (thanks to Raphael Huck) SVN-Revision: 29329
2011-11-25 00:53:13 +00:00
PREFIX="/usr"
add conffiles, use proper optimization flags when building. SVN-Revision: 3997
2006-06-18 18:27:23 +00:00
convert to new template SVN-Revision: 3744
2006-05-09 23:19:52 +00:00
define Package/dnsmasq/install
replace lots of manual install commands with INSTALL_* variables SVN-Revision: 5624
2006-11-23 00:29:07 +00:00
$(INSTALL_DIR) $(1)/usr/sbin
package/dnsmasq: update to 2.59 (thanks to Raphael Huck) SVN-Revision: 29329
2011-11-25 00:53:13 +00:00
$(CP) $(PKG_INSTALL_DIR)/usr/sbin/dnsmasq $(1)/usr/sbin/
upgrade dnsmasq to latest version, rewrite dnsmasq init script for uci, rename /bin/ipcalc to /bin/ipcalc.sh (fixes #1452) SVN-Revision: 6595
2007-03-17 13:31:13 +00:00
$(INSTALL_DIR) $(1)/etc/config
dnsmasq: tighten config file permissions Install following as config files (600) perms instead of as data (644) /usr/share/dnsmasq/dhcpbogushostname.conf /usr/share/dnsmasq/trust-anchors.conf /usr/share/dnsmasq/rfc6761.conf /etc/hotplug.d/ntp/25-dnsmasqsec /etc/config/dhcp /etc/dnsmasq.conf dnsmasq reads relevant config files before dropping root privilege and running as dnsmasq:dnsmasq ntpd runs as root so the hotplug script is still accessible Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2018-10-11 08:46:42 +00:00
$(INSTALL_CONF) ./files/dhcp.conf $(1)/etc/config/dhcp
$(INSTALL_CONF) ./files/dnsmasq.conf $(1)/etc/dnsmasq.conf
replace lots of manual install commands with INSTALL_* variables SVN-Revision: 5624
2006-11-23 00:29:07 +00:00
$(INSTALL_DIR) $(1)/etc/init.d
$(INSTALL_BIN) ./files/dnsmasq.init $(1)/etc/init.d/dnsmasq
dnsmasq: add dhcp-script hook for other packages Adds a script which acts as a hook for when dnsmasq creates/destroys a lease, or completes a TFTP file transfer. The hook loops through scripts in appropriate directories inside '/etc/hotplug.d', executing each one with the same arguments supplied by dnsmasq. In case dnsmasq is jailed by ujail the dhcp-script hook will not work as expected as ujail does not yet support executing a script within a jail. Signed-off-by: Nick Brassel <nick@tzarc.org> Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2017-05-06 10:56:26 +00:00
$(INSTALL_DIR) $(1)/etc/hotplug.d/dhcp
$(INSTALL_DIR) $(1)/etc/hotplug.d/neigh
dnsmasq: dnssec time handling uses ntpd hotplug Change dnsmasq's dnssec time check handling to use time validity indicated by ntpd rather than maintaining a cross boot/upgrade /etc/dnsmasq.time timestamp file. This saves flash device wear. If ntpd client is configured in uci and you're using dnssec, then dnsmasq will not check dnssec timestamp validity until ntpd hotplug indicates sync via a stratum change. The ntpd hotplug leaves a status flag file to indicate to dnsmasq.init that time is valid and that it should now start in 'check dnssec timestamp valid' mode. If ntpd client is not configured and you're using dnssec, then it is presumed you're using an alternate time sync mechanism and that time is correct, thus dnsmasq checks dnssec timestamps are valid from 1st start. Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk> V2 - stratum & step ntp changes indicate time is valid V3 - on initial flag file step signal dnsmasq with SIGHUP if running V4 - only accept step ntp changes. Accepting both stratum & step could result in unpleasant script race conditions V5 - Actually only accepting stratum is the correct thing to do after further testing V6 - improve handling of non busybox ntpd if sysntpd not executable dnsmasq checks dnssec timestamps else sysntp script disabled - look for timestamp file - allows external mechanism to use hotplug flag file sysntp script enabled & uci ntp enabled - look for timestamp file sysntp script enabled & uci ntp disabled - dnsmasq checks dnssec timestamps fi
2016-06-14 10:00:21 +00:00
$(INSTALL_DIR) $(1)/etc/hotplug.d/ntp
dnsmasq: add dhcp-script hook for other packages Adds a script which acts as a hook for when dnsmasq creates/destroys a lease, or completes a TFTP file transfer. The hook loops through scripts in appropriate directories inside '/etc/hotplug.d', executing each one with the same arguments supplied by dnsmasq. In case dnsmasq is jailed by ujail the dhcp-script hook will not work as expected as ujail does not yet support executing a script within a jail. Signed-off-by: Nick Brassel <nick@tzarc.org> Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2017-05-06 10:56:26 +00:00
$(INSTALL_DIR) $(1)/etc/hotplug.d/tftp
dnsmasq: install /etc/hotplug.d/ntp/25-dnsmasqsec world-readable /etc/hotplug.d/ntp/25-dnsmasqsec is being sourced by /sbin/hotplug-call running as ntpd user. For that to work the file needs to be readable by that user. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-10-28 01:56:16 +00:00
$(INSTALL_DATA) ./files/dnsmasqsec.hotplug $(1)/etc/hotplug.d/ntp/25-dnsmasqsec
dnsmasq: do not forward rfc6761 excluded domains RFC 6761 defines a number of top level domains should not be forwarded to the Internet's domain servers since they are not responsible for those domains. This change adds a list of domains that will be blocked when 'boguspriv' is used and augments that which is already blocked by dnsmasq's notion of 'local service' using '--bogus-priv' i.e. RFC 1918 private addresses and IPv6 prefixes as defined in RFC 6303. To make this configurable rather than hard coded in dnsmasq's init script, a new file /usr/share/dnsmasq/rfc6761.conf is conditionally included. The default file matches the RFC 6761 recommendation along with a few other top level domains that should not be forwarded to the Internet. Compile & run tested Archer C7 v2 Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
2017-02-20 10:15:55 +00:00
$(INSTALL_DIR) $(1)/usr/share/dnsmasq
dnsmasq: tighten config file permissions Install following as config files (600) perms instead of as data (644) /usr/share/dnsmasq/dhcpbogushostname.conf /usr/share/dnsmasq/trust-anchors.conf /usr/share/dnsmasq/rfc6761.conf /etc/hotplug.d/ntp/25-dnsmasqsec /etc/config/dhcp /etc/dnsmasq.conf dnsmasq reads relevant config files before dropping root privilege and running as dnsmasq:dnsmasq ntpd runs as root so the hotplug script is still accessible Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2018-10-11 08:46:42 +00:00
$(INSTALL_CONF) ./files/dhcpbogushostname.conf $(1)/usr/share/dnsmasq/
$(INSTALL_CONF) ./files/rfc6761.conf $(1)/usr/share/dnsmasq/
dnsmasq: add dhcp-script hook for other packages Adds a script which acts as a hook for when dnsmasq creates/destroys a lease, or completes a TFTP file transfer. The hook loops through scripts in appropriate directories inside '/etc/hotplug.d', executing each one with the same arguments supplied by dnsmasq. In case dnsmasq is jailed by ujail the dhcp-script hook will not work as expected as ujail does not yet support executing a script within a jail. Signed-off-by: Nick Brassel <nick@tzarc.org> Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2017-05-06 10:56:26 +00:00
$(INSTALL_DIR) $(1)/usr/lib/dnsmasq
$(INSTALL_BIN) ./files/dhcp-script.sh $(1)/usr/lib/dnsmasq/dhcp-script.sh
dnsmasq: add ubus notifications for new leases Signed-off-by: John Crispin <john@phrozen.org>
2017-08-22 14:43:02 +00:00
$(INSTALL_DIR) $(1)/usr/share/acl.d
$(INSTALL_DATA) ./files/dnsmasq_acl.json $(1)/usr/share/acl.d/
dnsmasq: adapt to non-root ntpd Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-10-25 12:44:50 +00:00
$(INSTALL_DATA) ./files/dnsmasqsec_hotplug_acl.json $(1)/usr/share/acl.d/
dnsmasq: add uci-defaults script for config migration When running sysupgrade from an existing configuration, UCI option dhcp.@dnsmasq[0].resolvfile needs to be modified in case it has not been changed from it's original value. Accomplish that using a uci-defaults script. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-01-09 13:32:12 +00:00
$(INSTALL_DIR) $(1)/etc/uci-defaults
$(INSTALL_BIN) ./files/50-dnsmasq-migrate-resolv-conf-auto.sh $(1)/etc/uci-defaults
convert to new template SVN-Revision: 3744
2006-05-09 23:19:52 +00:00
endef
convert dnsmasq to new packaging style SVN-Revision: 851
2005-05-12 19:41:18 +00:00
dnsmasq: Bump to 2.62, add DHCPv6 variant SVN-Revision: 32764
2012-07-17 11:48:27 +00:00
Package/dnsmasq-dhcpv6/install = $(Package/dnsmasq/install)
dnsmasq: Add a full variant This variant includes support for DHCPv6 and DNSSEC. DNSSEC adds a dependency on libnettle. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41244
2014-06-18 10:04:25 +00:00
define Package/dnsmasq-full/install
$(call Package/dnsmasq/install,$(1))
dnsmasq: fix dependency problems of the dnsmasq-full variant. This patch tries to - Let the DHCPv6 feature depend on CONFIG_IPV6. - Conditionally select libnettle, kmod-ipv6, kmod-ipt-ipset only if the corresponding features are enabled. - Install `trust-anchors.conf` only if DNSSEC is selected. - Add PKG_CONFIG_DEPENDS for the configurable options. - Add a patch to let the Makefile of dnsmasq be aware of changes in COPTS variable. Big thanks goes to Frank Schäfer <fschaefer.oss@googlemail.com> for providing necessary information on connections and dependency relations between these CONFIGs and packages. Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> SVN-Revision: 43851
2015-01-05 13:03:48 +00:00
ifneq ($(CONFIG_PACKAGE_dnsmasq_full_dnssec),)
dnsmasq: Add a full variant This variant includes support for DHCPv6 and DNSSEC. DNSSEC adds a dependency on libnettle. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41244
2014-06-18 10:04:25 +00:00
$(INSTALL_DIR) $(1)/usr/share/dnsmasq
dnsmasq: tighten config file permissions Install following as config files (600) perms instead of as data (644) /usr/share/dnsmasq/dhcpbogushostname.conf /usr/share/dnsmasq/trust-anchors.conf /usr/share/dnsmasq/rfc6761.conf /etc/hotplug.d/ntp/25-dnsmasqsec /etc/config/dhcp /etc/dnsmasq.conf dnsmasq reads relevant config files before dropping root privilege and running as dnsmasq:dnsmasq ntpd runs as root so the hotplug script is still accessible Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2018-10-11 08:46:42 +00:00
$(INSTALL_CONF) $(PKG_BUILD_DIR)/trust-anchors.conf $(1)/usr/share/dnsmasq
dnsmasq: fix dependency problems of the dnsmasq-full variant. This patch tries to - Let the DHCPv6 feature depend on CONFIG_IPV6. - Conditionally select libnettle, kmod-ipv6, kmod-ipt-ipset only if the corresponding features are enabled. - Install `trust-anchors.conf` only if DNSSEC is selected. - Add PKG_CONFIG_DEPENDS for the configurable options. - Add a patch to let the Makefile of dnsmasq be aware of changes in COPTS variable. Big thanks goes to Frank Schäfer <fschaefer.oss@googlemail.com> for providing necessary information on connections and dependency relations between these CONFIGs and packages. Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> SVN-Revision: 43851
2015-01-05 13:03:48 +00:00
endif
dnsmasq: Add a full variant This variant includes support for DHCPv6 and DNSSEC. DNSSEC adds a dependency on libnettle. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41244
2014-06-18 10:04:25 +00:00
endef
convert to new template SVN-Revision: 3744
2006-05-09 23:19:52 +00:00
$(eval $(call BuildPackage,dnsmasq))
dnsmasq: Bump to 2.62, add DHCPv6 variant SVN-Revision: 32764
2012-07-17 11:48:27 +00:00
$(eval $(call BuildPackage,dnsmasq-dhcpv6))
dnsmasq: Add a full variant This variant includes support for DHCPv6 and DNSSEC. DNSSEC adds a dependency on libnettle. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41244
2014-06-18 10:04:25 +00:00
$(eval $(call BuildPackage,dnsmasq-full))
Reference in New Issue Copy Permalink