packages/net/travelmate, branch master

travelmate: update 2.4.6-2

2026-06-17T18:58:27Z

harden captive portal auto-login script handling: * enforce the login-script allowlist in the backend instead of the LuCI frontend only: canonicalize the configured path via 'readlink -f' (defeats ../ traversal and symlink-to-interpreter tricks) and require a regular, executable /etc/travelmate/*.login file before running it * run the script in a noglob subshell ('set -f') so attacker-influenceable script_args can no longer expand globs into the trusted script; field splitting (multiple args) is preserved * writing into /etc/travelmate/ is not covered by the luci-app-travelmate ACL, so this limits the root-executed script to admin-placed login scripts and closes a delegated-ACL to root command execution path. Signed-off-by: Dirk Brenken

travelmate: release 2.4.6-1

2026-06-16T19:30:33Z

- fix uplink teardown for bssid-pinned stations the new implementaion reads the sta object once and parses fields by name via jshn (isolated namespace, single fork). Bug finder: @adam8833 (#29768) - add a fork-free f_normbssid() helper and normalize all config-side bssids to upper case before comparison (in f_getcfg(), covering all callers, and on the direct scan comparisons in f_main()). - LuCI: adds a normBssid() helper function as well Signed-off-by: Dirk Brenken

travelmate: update 2.4.5-3

2026-05-17T10:52:35Z

- re-added the accidently removed 'trm_lookupcmd', still used in the auto-login scripts Signed-off-by: Dirk Brenken

travelmate: update 2.4.5-2

2026-05-16T17:55:53Z

- gated config sanity checks at the end of travelmate-functions.sh behind 'trm_action' to fix init script enable/disable/help paths - added a ubus socket guard around f_system to harden against pre-ubus sourcing - added a 'trm_bver' fallback in f_log for sourcing paths without prior f_system execution - reordered system utility references before system library sourcing, so f_log has a valid 'trm_logcmd' available if the library check fails - minor code improvements Signed-off-by: Dirk Brenken

travelmate: release 2.4.5-1

2026-05-09T19:39:29Z

- added opt-in protection against access points with locally-administered (LAA) BSSIDs - added a special trm_maxretry value '0', enabling unlimited connection retries - removed obsolete connection-tracking functions (too many uci updates/flash wear) - all runtime files now live under a single /var/run/travelmate/ directory - various code cleanups & fixes - LuCI: made the new UCI option 'trm_eviltwin' available - LuCI: more cleanups - readme update Signed-off-by: Dirk Brenken

travelmate: update 2.4.0-2

2026-02-20T17:07:25Z

* fixed a busybox awk problem in the new scan function * minor cleanups * LuCI: more eslint fixes Signed-off-by: Dirk Brenken

travelmate: release 2.4.0-1

2026-02-18T20:22:41Z

* rework wlan scanning - drop iw/ip - use ubus/iwinfo calls instead - build a new, central wlan scan function (used in LuCI and during * simplify uci config parsing Signed-off-by: Dirk Brenken

travelmate: release 2.3.0-1

2025-12-11T21:43:55Z

* split travelmate.s in a new central travelmate function library (usr/lib/travelmate-functions.sh) plus a smal service script (/usr/bin/travelmate-service.sh) * the vpn-, mail- and login scripts are now using the central function library * rework the ntp hotplug script * harden the config parsing * support the curl interface option to specify which network pathway is used for outgoing requests * the travelmate status now includes the backend- and frontend version information * LuCI: use a special travelmate interface, e.g. trm_wwan or use an existing wwan interface * LuCI: no longer call the logread binary, use rpc / the ubus log object instead * LuCI: various code cleanups * LuCI: various small usability improvements * readme update Signed-off-by: Dirk Brenken

travelmate: update 2.2.1-6

2025-11-14T21:00:34Z

- rework the iw device detection in the scan function - remove any limits from the radio selection - control the reverse radio processing order with a separate option 'trm_revradio' - tweak a few (debug) log statements - LuCI updates (separate commit) - readme update Signed-off-by: Dirk Brenken

travelmate: update 2.2.1-5

2025-11-07T16:29:02Z

- fix a cornercase issue in the scanning function with hidden uplinks Signed-off-by: Dirk Brenken