aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* samba: add file/interface reload triggers & filter interfacesConn O'Griofa2016-08-151-9/+10
| | | | | | | | | | | | | | | | * Only parse interfaces that are up during init_config (as the script depends on this to determine the proper IP/subnet range) * Add reload interface triggers for samba-designated interfaces * Force full service restart upon config change to ensure Samba binds to new interfaces (sending HUP signal doesn't work) * Rename "interface" variable to "samba_iface" and move into global scope Needed to fix Samba connectivity for clients connecting from a different LAN subnet (e.g. pseudobridge configurations) due to the 'bind interfaces only' setting. Signed-off-by: Conn O'Griofa <connogriofa@gmail.com>
* ar71xx: fix profile name of Mercury MW4530RChuanhong Guo2016-08-152-2/+2
| | | | | | | | The mw4530r-v1 profile in tp-link.mk is for Mercury MW4530R. There is no such a device called TL-WDR4530. Also change MERCURY to Mercury in /lib/ar71xx.sh Signed-off-by: Chuanhong Guo <gch981213@gmail.com>
* procd: update to latest git HEADJohn Crispin2016-08-151-2/+2
| | | | | | adds O_PATH define Signed-off-by: John Crispin <john@phrozen.org>
* ncurses: change handling of PKG_CONFIG_LIBDIRJo-Philipp Wich2016-08-156-9/+92
| | | | | | | | | | | | | | When PKG_CONFIG_LIBDIR was unset in the environment, the configure script was deducing the PKG_CONFIG_LIBDIR from the location of the pkg-config binary, which doesn't make a lot of sense, and isn't done by other autotools based packages. Patch imported from the Buildroot project: https://github.com/buildroot/buildroot/blob/master/package/ncurses/0001-fixup-pkg-config-handling.patch Also refresh patches while we're at. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* scripts: ipkg-build: do not require git or svnJo-Philipp Wich2016-08-151-2/+2
| | | | | | | | Move the "which svn" and "which git" calls next to the timestamp commands using those tools to not prematurely fail on systems where svn or git are not present. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* kernel: fix crashlog on x86/64Jo-Philipp Wich2016-08-151-2/+6
| | | | | | | | | | | | The bootmem area reserved for crashlog might be smaller than CRASHLOG_OFFSET bytes, leading to an integer underflow when calculating the memory address in crashlog_set_addr() which subsequently causes the kernel to crash when attempting to vmap() the crashlog pages. Change the logic to only consider the offset when the size of the used memory area is sufficient. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* bcm53xx: add quick fixes for BCM53573Rafał Miłecki2016-08-151-0/+97
| | | | | | | | It adds and uses ILP clock that requires some other work (in progress) for upstreaming it. Other than that it adds a quick fix for bcma to add serial flash before trying to read SPROM. Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* bcm53xx: add temporary BCM53573 ILP clock driverRafał Miłecki2016-08-151-0/+235
| | | | | | | | It wasn't accepted upstream as there was a discusson on Northstar vs. BCM53573. Once we get a new ARM arch Kconfig entry it should be possible to upstream it. Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* bcm53xx: prepare for building Tenda AC9 TRX imageRafał Miłecki2016-08-151-0/+8
| | | | | | It'll be enabled when we complete basic support. Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* toolchain/uClibc: add missing config symbolStijn Tintel2016-08-151-0/+1
| | | | Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* bcm53xx: drop target's preinit network support scriptRafał Miłecki2016-08-141-7/+0
| | | | | | We don't need it anymore since the rework of generic preinit script. Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* base-files: set pi_ifname in board.d case to fix deconfigJonas Gorski2016-08-141-1/+3
| | | | | | | | Due to an empty pi_ifname in the generic failsafe setup, the deconfig never removed the failsafe networking interface, causing broken networking later on. Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com>
* tools: make_ext4fs: switch to LEDE git mirrorJo-Philipp Wich2016-08-141-1/+1
| | | | Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* tools: make_ext4fs: support creating empty filesystem imagesJo-Philipp Wich2016-08-141-3/+3
| | | | | | | Update make_ext4fs to latest git head in order to support creating empty filesystem images by making the source directory argument optional. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* mvebu: rework ClearFog bundle.tar.gz generationJo-Philipp Wich2016-08-141-12/+6
| | | | | | | Instead of introducing a fake filesystem type, move the tar generation step directly into the image build step. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* bcm53xx: support USB 2.0 controller on BCM53573Rafał Miłecki2016-08-143-9/+171
| | | | Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* bcm53xx: backport USB 3.0 controller init patchRafał Miłecki2016-08-143-42/+87
| | | | Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* bcm53xx: backport USB 3.0 Northstar PHY driverRafał Miłecki2016-08-142-0/+362
| | | | Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* bcm53xx: rename PHY patches to use 07* prefixRafał Miłecki2016-08-142-0/+0
| | | | | | | This is not a strict rule but it matches better this one: 7xx - network / phy driver patches Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* mvebu: add ClearFog .tar.gz bundleJo-Philipp Wich2016-08-131-0/+26
| | | | | | | | | | The previous image building code rework removed the rootfs.tar.gz with embedded kernel and dtb build artifact which is required to build suitable SD images. Reintroduce a .tar.gz artifact locally which embeds kernel and dtb, similar to how the old code handled it. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* kernel: backport upstream challenge ACK fix (CVE-2016-5696)Jo-Philipp Wich2016-08-133-0/+218
| | | | | | | | | | | | Yue Cao claims that current host rate limiting of challenge ACKS (RFC 5961) could leak enough information to allow a patient attacker to hijack TCP sessions. He will soon provide details in an academic paper. Backports upstream commit 75ff39ccc1bd5d3c455b6822ab09e533c551f758 to the used LEDE kernel versions. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* brcm63xx: switch to board based failsafe networkingJonas Gorski2016-08-131-37/+0
| | | | Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com>
* base-files: configure switch in failsafeJonas Gorski2016-08-131-2/+46
| | | | | | | Also configure the switch based on the failsafe config, and create the failsafe interface as tagged if necessary. Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com>
* base-files: allow failsafe to configure vlansJonas Gorski2016-08-131-3/+29
| | | | | | | In preparation of properly setting up vlans and switches, add support for configuring failsafe on a vlan tagged interface. Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com>
* base-files: add preinit ifname detection based on board.jsonJonas Gorski2016-08-131-0/+29
| | | | | | Make use of the existing board.d to autodetect lan ifname in a generic way. Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com>
* base-files: split out preinit interface configJonas Gorski2016-08-131-4/+10
| | | | | | | Move preinit interface and ip config to its own function to allow calling it from more than one place. Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com>
* base-files: board_detect: allow specifying the generated fileJonas Gorski2016-08-132-4/+6
| | | | | | | Allow passing a filename to change the location of the generated board.json. Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com>
* base-files: let config_generate call board_detectJonas Gorski2016-08-133-4/+2
| | | | | | | Instead of board_detect generating the config as a side effect, let config_generate call board_detect as needed. Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com>
* brcm63xx: backport mtd of node changes from upstreamJonas Gorski2016-08-1312-23/+608
| | | | | | | Should fix parser data containing uninitialized values for of probed physmap flashes, which could break e.g. the redboot parser. Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com>
* kernel: check SOURCE_DATE_EPOCH before setting KBUILD_BUILD_TIMESTAMPJonas Gorski2016-08-131-1/+1
| | | | | | Make sure SOURCE_DATE_EPOCH actually contains something. Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com>
* kernel: allow reproducable buildsJonas Gorski2016-08-131-0/+2
| | | | | | | | | | | | Similar how we fix the file times in the filesystems, fix the build time of the kernel, and make the build number static. This should allow the kernel build to be reproducable when combined with setting the KERNEL_BUILD_USER and _DOMAIN in case of different machines. The reproducability only applies to non-initramfs kernels, those still require additional changes. Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com>
* dropbear: security update to 2016.74Jo-Philipp Wich2016-08-121-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | - Security: Message printout was vulnerable to format string injection. If specific usernames including "%" symbols can be created on a system (validated by getpwnam()) then an attacker could run arbitrary code as root when connecting to Dropbear server. A dbclient user who can control username or host arguments could potentially run arbitrary code as the dbclient user. This could be a problem if scripts or webpages pass untrusted input to the dbclient program. - Security: dropbearconvert import of OpenSSH keys could run arbitrary code as the local dropbearconvert user when parsing malicious key files - Security: dbclient could run arbitrary code as the local dbclient user if particular -m or -c arguments are provided. This could be an issue where dbclient is used in scripts. - Security: dbclient or dropbear server could expose process memory to the running user if compiled with DEBUG_TRACE and running with -v The security issues were reported by an anonymous researcher working with Beyond Security's SecuriTeam Secure Disclosure www.beyondsecurity.com/ssd.html Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* mwlwifi: upgrade to 10.3.0.18-20160804Imre Kaloz2016-08-111-2/+2
| | | | | | adds support for the Linksys WRT1900ACSv2 and WRT1200ACv2 Signed-off-by: Imre Kaloz <kaloz@openwrt.org>
* kernel: add missing config symbolFelix Fietkau2016-08-111-1/+2
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* oxnas: set preinit network interfaceDaniel Golle2016-08-111-0/+7
| | | | | | set network interface for failsafe mode to eth0 for all boards Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* ramips: fix legacy image buildFelix Fietkau2016-08-111-4/+7
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* kernel: fix crashlog issues on highmem systemsFelix Fietkau2016-08-111-19/+32
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* bcm53xx: add profiles for Buffalo devicesRafał Miłecki2016-08-111-2/+24
| | | | | | | This generates proper images when using CONFIG_TARGET_MULTI_PROFILE and CONFIG_TARGET_PER_DEVICE_ROOTFS. Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* bcm53xx: include USB modules in images for devices with USB portsRafał Miłecki2016-08-111-9/+16
| | | | | | This allows using USB out of the box. Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* bcm53xx: add profiles for all other (SoftMAC) devicesRafał Miłecki2016-08-111-31/+34
| | | | | | | Thanks to this images for SoftMAC devices don't get brcmfmac anymore and b43 is added for devices with (quite poor) support only. Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* ath10k-firmware: Update to latest 99X0 CT firmware.Ben Greear2016-08-111-2/+2
| | | | | | | | | | Among other things, this compiles out support for peer caching. The feature did not seem to work well in my testing of AP mode, and totally breaks my own special use of station mode. Briefly tested on ea8500. Signed-off-by: Ben Greear <greearb@candelatech.com>
* ath10k-ct: Fix loading 9980 firmware.Ben Greear2016-08-111-2/+2
| | | | | | | | | | | ath10k-ct driver was using bad defaults for 9980 if user had not specified a fwcfg file to over-ride them. Also, support configurable station-kickout-threshold, which might work around issues with flakey connections. Signed-off-by: Ben Greear <greearb@candelatech.com> Signed-off-by: Felix Fietkau <nbd@nbd.name> [fix PKG_VERSION]
* tools: flock: add NFSv4 compatibilityMathias Kresin2016-08-111-0/+16
| | | | | | | | | | | | | | | | | | | | | | This patch fixes the LEDE build on mounted NFSv4 shares. The lock file cannot be opened in read-write mode by default, because then we cannot use flock(1) to lock executable files. The read-write mode for lock files is necessary on NFSv4 where flock(2) is emulated by by fcntl() -- this situation is possible to detect by flock(2) EBADF error. The patch consist of the following util-linux/flock commits http://git.kernel.org/cgit/utils/util-linux/util-linux.git/commit/?id=eb742a1f66d5e3a7c5b43efce741c113f51bef3b http://git.kernel.org/cgit/utils/util-linux/util-linux.git/commit/?id=caf1ba11a367ad702fb774653daf9ebdcca49d7b without including the pre kernel 3.4 support. Signed-off-by: Mathias Kresin <dev@kresin.me> Signed-off-by: Felix Fietkau <nbd@nbd.name> [minor cleanup]
* gcc: optionally build gccgo compilerMatteo Croce2016-08-115-2/+49
| | | | | | Tested with eglibc on x86 and armv7 so far Signed-off-by: Matteo Croce <matteo.croce@canonical.com>
* kernel: add plan 9 fs packageMatteo Croce2016-08-115-0/+46
| | | | | | | 9pfs is used by kvm to share files between host and guest, add proper config option to enable it. Signed-off-by: Matteo Croce <matteo.croce@canonical.com>
* hostapd: Allow RADIUS accounting without 802.1xPetko Bordjukov2016-08-111-10/+9
| | | | | | | | RADIUS accounting can be used even when RADIUS authentication is not used. Move the accounting configuration outside of the EAP-exclusive sections. Signed-off-by: Petko Bordjukov <bordjukov@gmail.com>
* lantiq: fix some ethernet driver SMP issuesFelix Fietkau2016-08-111-10/+16
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* bcm53xx: convert (disabled) Netgear R8500 image to own profileRafał Miłecki2016-08-111-1/+8
| | | | | | It should be the last device with FullMAC chipset to convert. Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* bcm53xx: add profile with brcmfmac for Netgear R7900Rafał Miłecki2016-08-111-1/+8
| | | | | | | It's one more device with FullMAC that got forgotten in the previous commit. Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* bcm53xx: add profiles for devices with FullMAC chipsetsRafał Miłecki2016-08-101-1/+12
| | | | | | | | This allows building images for selected devices with brcmfmac only (without b43 which is for SoftMAC devices). Signed-off-by: Rafał Miłecki <rafal@milecki.pl> Reviewed-by: Jo-Philipp Wich <jo@mein.io>
generated by cgit v1.2.3 (git 2.25.1) at 2024-10-31 09:01:26 +0000