| Age | Commit message (Collapse) | Author |
|---|
|
Set the 1.15.0 changelog date and the fallback versions used when
building without git metadata (CMakeLists.txt and cmake/cpack.cmake;
the latter was left at 1.13.0 by the 1.14.0 release). List the
metrics module among README features.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Denys Fedoryshchenko <denys.f@collabora.com>
|
|
Add the missing PPPoSEQ install rules and standalone driver metadata. Supply the running kernel release as the default RPM module destination. Extend the rootless install regression to verify Debian/CentOS packaging names, staged module paths, and exclusion after disabling the build flag.
Validation: CTest passes; generated full and standalone DEBs contain ppposeq.ko and have the expected package names. RPM install rules were staged and checked; an RPM archive was not built because rpmbuild is unavailable.
Signed-off-by: Denys Fedoryshchenko <denys.f@collabora.com>
|
|
Install each module from its real build directory, propagate staged install roots, and fail when kbuild modules_install fails. Add a rootless CTest and CI regression for successful and failed installs.
Best practices followed:
Use the standard CMake DESTDIR and kbuild INSTALL_MOD_PATH staging interfaces:
https://cmake.org/cmake/help/latest/envvar/DESTDIR.html
https://docs.kernel.org/kbuild/modules.html#install-mod-path
Check child command status with execute_process RESULT_VARIABLE:
https://cmake.org/cmake/help/latest/command/execute_process.html
Register repeatable tests with CTest add_test:
https://cmake.org/cmake/help/latest/command/add_test.html
|
|
drivers/pptp is version 0.8.5 of the PPTP driver, the direct ancestor of mainline drivers/net/ppp/pptp.c. Mainline merged that code in 2.6.37 (2011) from the same author and has maintained it since; this copy received none of the subsequent fixes and is no longer worth carrying:
- It cannot be built. struct flowi's nl_u union, the 3-argument ip_route_output_key(), sock_no_poll, the old ip_select_ident() signature and nf_reset() all disappeared long ago, so nothing past roughly 2.6.36 compiles and -DBUILD_PPTP_DRIVER=TRUE is a build failure everywhere.
- It is not needed. The PPTP bits of accel-pppd/include/if_pppox.h are identical to the mainline UAPI header, so ctrl/pptp's socket(AF_PPPOX, SOCK_STREAM, PX_PROTO_PPTP) reaches the in-kernel module (alias net-pf-24-proto-2) unchanged. The daemon uses no interface the bundled driver added. The deleted drivers/pptp/if_pppox.h was included only by drivers/pptp/pptp.c; all other if_pppox.h includes use either the kernel UAPI header or accel-pppd's userspace copy.
- It is unsafe. Among others: the pskb_may_pull() in pptp_rcv() is commented out, so the GRE header is parsed with no length validation at all; the skb->len - headersize comparison in pptp_rcv_core() underflows and leads to an out-of-bounds read and a negative skb_pull(); pptp_getname() copies uninitialised stack to userspace; and pptp_bind()/pptp_connect() never check sockaddr_len (CVE-2015-8569). Mainline fixed each of these years ago.
Remove the directory along with the BUILD_PPTP_DRIVER option, the accel-pptp-kmod package and the ip_gre conflict warning, which only existed because this module claimed IPPROTO_GRE. accel-pppd/ctrl/pptp and accel-pppd/include/if_pppox.h are unaffected. PPTP now requires the kernel's own pptp module; kernels older than 2.6.37 are no longer supported.
|
|
|
|
chap dont have errors like mschap
Signed-off-by: Denys Fedoryshchenko <denys.f@collabora.com>
|
|
PCRE is not supported anymore and removed from several distros
|
|
|
|
Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
|
|
We need to set certain fields before release.
Signed-off-by: Denys Fedoryshchenko <denys.f@collabora.com>
|
|
third-party mainline ubuntu kernel package is broken so disable it
|
|
Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
|
|
Use real version instad of "gitgitgit"
|
|
We set fake variables so recipe doesn't fail.
It is a bit of hack for such situation, but makes development easier.
Signed-off-by: Denys Fedoryshchenko <denys.f@collabora.com>
|
|
This includes CentOS Stream, AlmaLinux, and RockyLinux.
|
|
|
|
Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
|
|
|
|
|
|
Version number for Accel-PPP is already generated in CMakeLists.txt and thus
it should not be manually defined in a second place (cmake/cpack.cmake).
Reuse the version number obtained in CMakeLists.txt when building binary
packages -> single source.
Signed-off-by: Christian Poessinger <christian@poessinger.com>
|
|
|
|
|
|
|
|
* triton: rewrited context sleeping implementation
* triton: prevent alloc_context function to be inlined (fixes improper stack size calculation)
* triton: fixed improper locking
* triton: fixed context schedule/wakeup race
* radius: implemented split request queue to 2 subqueues
* radius: fixed invalid behaviour when route to radius server is not existing
* radius: implemented lua support
* radius: fixed memory leak
* radius: add support for route priority (metric) in Framed-Route
* radius: allow CoA/DM by single username attribute
* radius: implemented Framed-IPv6-Route attribute
* radius: fixed bug (inserting empty Class)
* radius: fixed bug after radius server recovery
* chap-secrets: allow to use pool name instead of address to specify ipv4 pool
* auth: fixed re-authentication of peer in all chap modules
* ipv6: improved dhcpv6
* ipv6: implemented special handling of /128 prefixes
* ipv6: ignore "unspecified address" (::/128)
* ipv6: fixed host scope routes
* dhcpv6: fix delegated prefix routes
* dhcpv6: fix PD linklocal route for ipoe clients
* ipv6pool: added gw-ip6-address option and special handling for /128 prefixes
* ipoe: implemented new load balancing mechanism "weight"
* ipoe: implemented ipv6 in shared mode
* ipoe: implemented interface option mtu=N
* ipoe: improved handling of DHCP Request for nonexistent sessions.
* ipoe: improved support DHCP option-82.
* ipoe: fixed handling DHCP vendor-specific attributes.
* ipoe: arp: do not reply on requests from 0.0.0.0
* ipoe: implemented "noauth" for ipoe
* ipoe: use DHCP-Server-Identifier attribute as siaddr if DHCP-Server-IP-Address is not supplied
* ipoe: lua: introduced hwaddr field to session object
* ipoe: lua: introduced ipaddr field to session object
* ipoe: adding wins1/wins2 config options support
* ipoe: always ignore Gratoitous ARP
* ipoe: Fixed send NAK for REQUEST with 3 same XID for not existing sessions
* ipoe_mod: use least byte of hwaddr as hash key
* ipoe_mod: accept ipv6 packets from link-local address if session doesnot exists
* ipoe_mod: fixed ipv6 from non-shared mode
* lua: improved lua support, implemented support for lua 5.2/5.3.
* ppp: implemented per-ctrl ppp interface rename support, may be overrided by radius
* ppp: changed behaviour of lcp-echo-timeout
* ppp: fixed interface wildcard rename if kernel returns not zero, but picked index
* ppp: fixed bug in ppp_terminate
* ppp: fix mtu/mru negotiation in preallocate/unit-cache modes
* sstp: implemented sstp protocol support
* pppoe: fixed PADO delaying function
* pppoe: fixed invalid behaviour after changing pado-delay
* pptp: implemented adaptive pptp echo
* pptp: added the ppp-max-mtu option
* ippool: implemented next pool support
* ippool: fixed parsing /32 ranges
* ippool: exclude gw-ip-address from address pool
* shaper: install skbedit filter for all protocols
* shaper: ignore radius CoA request if shaper attributes are absent
* pppd-compat: implemented fork-limit.
* pppd_compat: do not call ip-down if session was not started.
* pppd_compat: fixed bug caused fork queue to stall.
* pppd_compat: fixed call ip-down even if ip-up is not specified
* pppd_compat: fixed argv[0] when calling ip-pre-up
* pppd_compat: run scripts in the PPP device netns
* pppd_compat: fixed handling of fork() failures
* pppd_compat: write human readable values of IPv6 address to radattr file
* connlimit: implemented connlimit for UP (unclassified packet) sessions
* cli: introduced ip6 and ip6-dp fields in "show sessions" command
* cli: show sessions: added uptime-raw columnt to print uptime in seconds
* cli: added to accel-cmd -P/--password support
* cli: add network namespace column in "show sessions"
* net-snmp: fixed crash on table request
* common: wait for previous session to finish when single-session=replace
* crypto: internal: add missed header and fix x64 build
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* general rewrite and improve ipoe/vlan_mon drivers
* ipoe: generate EUI-64 interface identifier for ipv6 addresses
* ipoe: log warning if interface was not started by vlan_mon notification
* ipoe: introduced option "start=auto"
* ipoe: translate UP session to dhcp session when dhcp request received (for shared=0 interfaces)
* ipoe: implemented starting UP session by arp request
* ipoe: log interface renaming
* pppoe: add interface name to log messages
* pppoe: implemented vlan_mon support
* pppd_compat: change mode of radattr files to 0644
* pppd_compat: check for script existance before fork
* radius: implemented handling of Framed-Route attribute
* radius: do not send NAS-Port and NAS-Port-Id if they are undefined
* radius: add Delegated-IPv6-Prefix to accounting packets
* radius: update Session-Timeout by CoA
* shaper: implemented internal class id map
* ppp: introduced unit-preallocate option
* ipv6: remove ipv6 address and routes on session termination
* vlan_mon: introduced autoclean module parameter
* iprange: implement config reload
* make termination caused by SIGTERM soft
* remove pid file on exit
* for single-session=deny make early check for duplicate username (before calling radius)
* fixed broken "noauth" mode
|
|
|
|
* ipoe: fixed mask calculation from ipaddr radius attribute
* ipoe: fixed authentication with chap-secrets
* ipoe: set Calling-Station-Id to client mac address for UP sessions
* ipoe: introduced idle-timeout and session-timeout options
* ipoe: for option password implemented special value csid
* ipoe: change l4-redirect-ipset/l4-redirect-table by CoA
* ipoe: don't block lua script if it raises error
* ipoe: implemented soft session termination
* ipoe: implemneted passing DHCP Option 82 to Radius as two separated attributes
* ipoe: changed behavior of agent-remote-id option
* ipoe: introduced option check-mac-change
* ipoe: disabled udp checksum validation
* ipoe: introduced 'calling-sid' option
* ipoe: send client IP address in Framed-IP-Address for UP sessions
* ipoe: implemented username=ifname for UP sessions
* ipoe: use single socket for arp processing
* ipoe: implemented dhcp option 58
* ipoe: for vlan name pattern implemented %P argument - VID of parent interface
* ipoe: implemented ability to use lua to make vlan name
* ipoe: show sessions: intoduced new field ipoe-type to display type of session (up or dhcp)
* ipoe: implemented interface renaming by NAS-Port-Id
* pppoe: use single discovery socket
* pppoe: check for tag length in print_packet function (fixes sigsegv)
* ppp: fixed send double ConfAck when LCP is started
* ppp: fix mtu/mru set if not negotiated on any end plus cleanup
* ppp: set mtu and mru after unit creation
* ppp: create ppp units after authentication
* ppp: set unit index from NAS_Port attribute if present
* cli: show sesisons: introduced rx-bytes,rx-pkts,tx-bytes,tx-pkts fields
* cli: show sesisons: introduced rx-bytes-raw,tx-bytes-raw fields
* session: implemented idle and timeout timers
* radius: override session's idle and timeout timers values by Idle-Timeout and Session-Timeout attributes
* shaper: fixed parsing ecn/noecn for fq_codel
* replace mktemp with mkstemp
* properly handle Cisco-AVPair
* consider only rx interface counter for idle timeout calculation
* net-snmp: export interface counters in the sessionTable
|
|
* radius: major improvments
* radius: use NAS-Port-Id in Access-Accept for interface renaming
* radius: introduced "weight" and "backup" per-server options
* radius: introduced "attr-tunnel-type" option
* radius: introduced "max-fail" option
* ipoe: introduced "ip-unnumbered" option
* ipoe: improved vlan monitor
* ipoe: introduced "attr-dhcp-lease-time" option
* ipoe: send option 82 from DHCP request to radius
* ipoe: fixed passing packets in 'redirect on reject' mode
* ipoe: implemented handling relayed DHCP clients
* ipoe: implemented "L4 redirect on reject" for DHCP sessions
* ipoe: implemneted ability to send L4 redirect table/L4 redirect ipset via radius attributes
* pppoe: introduced "called-sid" option
* pppoe: improved AC-Cookie mechanism
* ippool: introduced "shuffle" option
* core: improved "single-session=replace" handling
* shaper: apply rate multiplier to integer values
* shaper: implemented fq_codel leaf qdisc
* shaper: fixed passing quantum parameter to kernel
* shaper: introduced "moderate-quantum" option
* shaper: introduced "fwmark" option
* ipv6: add support for prefixes greater than 64
* ppp: make LCP magic number negotiation not mandatory
* ppp: implement address/control and protocol field compression
* ppp: implemented delayed unit close via unit cache
* pppd_compat: pass IPV6_PREFIX and IPV6_DELEGATED_PREFIX to ip-up/ip-down scripts
* cli: introduced verbose option
|
|
|
|
This reverts commit c317ff519717c5c9f0513b85bb7d10ba084c74e9.
|
|
|
|
* major l2tp rewrite
* introduced ipoe (ipv4 only) module
|
|
|
|
* implemented per CTRL mppe config
* implemented vendor/attr options to specify which radius attribute containes ip pool name
* implemented adaptive lcp echo functionality
* implemented leaf qdisc attachment (only sfq at present)
* implemented Challenge attribute handling (l2tp)
* implemented unit(interface) cache
* fixed ip-pre-up script result handling
* fixed time range start detection on startup/config reload
* fixed reading of req-limit option (radius)
* fixed unexpected radattr file removal
|
|
* fixed ip-down segfault
|
|
* implemented logwtmp module
* implemented connlimit module
* implemented advanced shaper
* implemented MS-Primary-DNS-Server/MS-Secondary-DNS-Server attributes
* fix per-interface PADI limiting (pppoe)
* fix module load order
* fix "show sessions match" (cli)
* other bugfixes and improvements
|
|
* implemented named IP pools (radius Framed-Pool attribute)
* implemented logging to system logger (log_syslog)
* implemented ability to send cli commands via snmp
* implemented PADI limiting (pppoe)
* implemented simultaneous radius requests limiting
* various bug fixes and improvements
|
|
* implemented SNMP support (using net-snmp AgentX)
* implemented multiple radius servers support
* implemented IPv6:
- PPP IPV6CP protocol
- Neighbor Discovery protocol in part of Router Advertisement
- DHCPv6 server including Prefix Delegation extension
- ipv6-pool module
- Radius Framed-Interface-Id, Framed-IPv6-Prefix, Delegated-IPv6-Prefix attributes
* fixed MPPE handling
* implemented noauth mode (login without authentication)
* improved CCP/IPCP handling
* included builtin crypto library (optional)
* improved l2tp handling
* fixed builtin shaper temporary rate change functionality
* various bug fixes and improvements
|
|
|
|
|
|
|
|
|
