aboutsummaryrefslogtreecommitdiffstats
path: root/config
Commit message (Collapse)AuthorAgeFilesLines
* include/kernel: add custom USER/DOMAIN config optionsFelix Fietkau2016-01-281-0/+16
| | | | | | | | | | | | | | | These allow the generated kernel's build metadata to be defined explicitly. This metadata is reported, eg, at boot time and in `uname -a` on running systems. If the variables aren't configured, the current build system username and hostname are used as normal. The motivation for this option is to achive reproducible (bit-for-bit identical) kernel builds of official openwrt releases. Signed-off-by: bryan newbold <bnewbold@robocracy.org> Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 48541
* build: do not deselect CONFIG_USE_SSTRIP if CONFIG_DEBUG is enabledFelix Fietkau2016-01-261-2/+1
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 48504
* build: add -fno-plt to default cflags, it improves PIC code optimizationFelix Fietkau2016-01-241-0/+1
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 48470
* build: use sstrip by default for muslFelix Fietkau2016-01-181-1/+1
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 48313
* Configure IPv6 kernel options in config/Config-kernel.inFelix Fietkau2016-01-041-0/+23
| | | | | | | | | | | | | | | | | | | Revision 46834 changed IPv6 support from a module to builtin. But since the configuration of the IPv6 kernel options was left in package/kernel/linux/modules/netsupport.mk, this means that an empty kmod-ipv6 module was still being generated (not packaged). This patch moves the configuration of the IPv6 kernel options to config/Config-kernel.in to remove this last bit of the module. Note that CONFIG_IPV6_PRIVACY was dropped (enabled by default since Linux v3.13), so this option is no longer needed. See https://github.com/torvalds/linux/commit/5d9efa7ee99eed58388f186c13cf2e2a87e9ceb4 Signed-off-by: Arjen de Korte <arjen+openwrt@de-korte.org> SVN-Revision: 48132
* kernel: add support for KERNEL_CGROUP_PIDSJohn Crispin2015-10-261-0/+7
| | | | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org> SVN-Revision: 47275
* cosmetic: remove trailing whitespacesLuka Perkov2015-10-151-1/+1
| | | | | | Signed-off-by: Luka Perkov <luka@openwrt.org> SVN-Revision: 47197
* linux: make IPv6 builtin if selected (saves >30KB)Steven Barth2015-09-091-1/+1
| | | | | | Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46834
* gcc: remove version 4.9-linaroFelix Fietkau2015-09-061-2/+2
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 46798
* enable strong SSP / Stackprotector on gcc5Steven Barth2015-08-181-2/+2
| | | | | | Signed-off-by: Dirk Neukirchen <dirkneukirchen@web.de> SVN-Revision: 46685
* build: disable kernel stack protector support for i386/x86_64Felix Fietkau2015-08-021-0/+1
| | | | | | | | | | | | When stack protector support is disabled in libc (always the case for !musl), gcc assumes that it needs to use __stack_chk_guard for the stack canary. This causes kernel build errors, because the kernel is only set up to handle TLS stack canaries. Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 46543
* hardening: disable user-space SSP for !muslSteven Barth2015-06-291-0/+1
| | | | | | Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46146
* toolchain: add fortify-headers, enable FORTIFY_SOURCE by defaultSteven Barth2015-06-231-0/+1
| | | | | | Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46117
* gcc/musl: rework SSP-supportSteven Barth2015-06-221-2/+2
| | | | | | | | | | | Make musl provide libssp_nonshared.a and make GCC link it unconditionally if musl is used. This should be a no-op if SSP is disabled and seems to be the only reliable way of dealing with SSP over all packages due to the mess that is linkerflags handling in packages. Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46108
* kernel: mitigate cgroups config dependency changesFelix Fietkau2015-06-181-1/+1
| | | | | | | | | | | Memory Resource Controller no longer depends on Resource counters since Kernel version 4.0. 3.18 is the only still supported version needing Resource counters for MEMCG, thus declare the dependency only for that version. Signed-off-by: Daniel Golle <daniel@makrotopia.org> SVN-Revision: 46024
* hardening: enable regular SSP support by defaultSteven Barth2015-06-171-2/+2
| | | | | | Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46020
* hardening: enable RELRO by defaultSteven Barth2015-06-161-0/+1
| | | | | | Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46004
* hardening: enable format security checking by defaultSteven Barth2015-06-161-1/+1
| | | | | | Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46003
* build: enable package list signing by defaultFelix Fietkau2015-05-051-0/+1
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 45614
* build: add integration for managing opkg package feed keysFelix Fietkau2015-04-061-0/+3
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 45286
* config: add an option to enable KPROBEJohn Crispin2015-04-011-0/+17
| | | | | | Signed-off-by: Mathieu Olivari <mathieu@codeaurora.org> SVN-Revision: 45212
* x86: clean up default grub baudrate settingsFelix Fietkau2015-03-291-4/+3
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 45113
* build: remove leftover olpc support codeFelix Fietkau2015-03-281-4/+4
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 45084
* kernel: cleanup seccomp symbol selectionJohn Crispin2015-03-261-7/+5
| | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> SVN-Revision: 45005
* x86: use PARTUUID instead explicitly specifying the device by defaultJo-Philipp Wich2015-03-241-2/+0
| | | | | | | | | | | | | This changes the x86 image generation to match x86_64, using the PARTUUID for the rootfs instead of explicitly configuring the device. It unbreaks KVM with VirtIO, which uses /dev/vda2 instead of /dev/sda2. Tested in QEMU/KVM with VirtIO, VirtualBox and VMware. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net> SVN-Revision: 44966
* build: remove obsolete references to cris and avr32Felix Fietkau2015-03-241-1/+1
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 44965
* kernel: Support kernel options required by systemdJohn Crispin2015-03-211-6/+28
| | | | | | | | | | | | | These kernel options are all likely to be widely useful in this modern age, but are immediately useful for systemd support. c.f. http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/sys-apps/systemd/systemd-9999.ebuild?&view=markup#l118 Adapted from a patch by Adam Porter. Signed-off-by: Jeff Waugh <jdub@bethesignal.org> SVN-Revision: 44929
* config: add function tracersJohn Crispin2015-03-181-0/+20
| | | | | | | | Adds menuconfig options for ftrace function tracers Signed-off-by: Bryan Forbes <bryan@reigndropsfall.net> SVN-Revision: 44878
* buildroot: make it easier to build all kmodsJonas Gorski2015-03-161-1/+5
| | | | | | | | | Split out kmods from ALL to make it easier to create local builds that are compatible kmod-wise with releases. Signed-off-by: Jonas Gorski <jogo@openwrt.org> SVN-Revision: 44830
* kernel: enable open by fhandle syscallsJohn Crispin2015-03-151-0/+6
| | | | | | | | | | | | | | | | | | | | This is needed by many services to function properly and as all modern distributions got it enabled, it starts to be a de-facto standard, i.e. user-space starts to silently depend on it. This also pulls in EXPORTFS, however, the kernel binary size increases only a little. On ARM systems comes down to 800 bytes uncompressed and about 200 bytes compressed size. On MIPS systems it's about 1.2 kB size increase of the LZMA compressed kernel. v2: use menuconfig option instead of just enabling the option Signed-off-by: Daniel Golle <daniel@makrotopia.org> SVN-Revision: 44765
* toolchain: The glorious return of glibc, ver 2.21John Crispin2015-03-121-3/+2
| | | | | | | | | | | It's the eglibc packaging with a bit of spit-polishing. And testing. :-) [blogic: merged glibc and eglibc into 1 and made eglibc a glibc variant] Signed-off-by: Jeff Waugh <jdub@bethesignal.org> Signed-off-by: John Crispin <blogic@openwrt.org> SVN-Revision: 44701
* config: disable kernel tracing on umlNicolas Thill2015-02-111-0/+1
| | | | | | Signed-off-by: Nicolas Thill <nico@openwrt.org> SVN-Revision: 44397
* config: remove CONFIG_BUILD_STATIC_TOOLSJo-Philipp Wich2015-02-061-8/+0
| | | | | | Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 44287
* config: fix typo in Global build settings menuNicolas Thill2015-02-051-2/+2
| | | | | | Signed-off-by: Nicolas Thill <nico@openwrt.org> SVN-Revision: 44258
* config: fix typo in Global build settings menuJohn Crispin2015-01-281-1/+1
| | | | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org> SVN-Revision: 44163
* Support for building an hardened OpenWRTJohn Crispin2015-01-171-9/+79
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Introduce configuration options to build an "hardened" OpenWRT. Options to enable Stack-Smashing Protection, FORTIFY_SOURCE and RELRO have been introduced. uClibc makefile now automatically detects if SSP support is necessary. hostapd makefile has been fixed to use "^" as sed separator since using a comma was problematic when using "-Wl,-z,now" and the like in TARGET_CFLAGS. Currently enabling SSP on user space depends on enabling SSP kernel side, this is due to the fact that TARGET_CFLAGS are used to build kernel modules (at least). Suggestions on how to avoid this are welcome. Using "select" instead of "depends on" doesn't seem to work with choice entries. Tested with a lantiq (WBMR) router, GCC 4.8, uClibc and a subset of the available packages. Needs to be tested with GCC 4.9 and the remaining packages. PIE not currently included. Signed-off-by: Alessandro Di Federico <ale+owrt@clearmind.me> SVN-Revision: 44005
* config: enable EARLY_PRINTK on bcm53xx by defaultRafał Miłecki2015-01-161-0/+1
| | | | | | | | | It's useful for debugging and safe at the same time as we enable it per device. Signed-off-by: Rafał Miłecki <zajec5@gmail.com> SVN-Revision: 43980
* kernel: add SECCOMP to menuconfigJohn Crispin2015-01-081-0/+14
| | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> SVN-Revision: 43888
* packages: fix typo in OpenWrt nameJohn Crispin2014-12-071-1/+1
| | | | | | Signed-off-by: Cezary Jackiewicz <cezary.jackiewicz@gmail.com> SVN-Revision: 43542
* config: use PARTUUID by default on x86_64Jo-Philipp Wich2014-10-271-3/+4
| | | | | | Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 43086
* Kconfig: Fix missing help text in DEVEL config menuHauke Mehrtens2014-09-131-2/+13
| | | | | | | | | | | This patch completes missing help text for some options under CONFIG_DEVEL. Provides help for BINARY_FOLDER and DOWNLOAD_FOLDER, and reduces ambiguity in the help for BUILD_SUFFIX with an example. Signed-off-by: Andrew McDonnell <bugs@andrewmcdonnell.net> SVN-Revision: 42520
* Kconfig: Various typo/grammar/line-length fixes in Config*.in filesHauke Mehrtens2014-09-134-80/+85
| | | | | | | | | | | | | Non-functional changes to config/Config-*.in files, including: * spelling mistakes * inconsistent terminology * grammar * overly long lines in "help" components Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca> SVN-Revision: 42519
* config: enable cgroup freezerLuka Perkov2014-09-101-1/+1
| | | | | | | | This option will be enabled by default only when cgroups support is enabled. Signed-off-by: Luka Perkov <luka@openwrt.org> SVN-Revision: 42464
* PKG_CHECK_FORMAT_SECURITY: add a menuconfig option, disable by defaultJohn Crispin2014-08-251-0/+9
| | | | | | | | | | | The idea is still to enable it by default at some point I've tested all ar71xx packages (except oldpackages) using CONFIG_ALL=y Failing packages have been marked with PKG_CHECK_FORMAT_SECURITY:=0 for now I can test more targets but i have no idea which are the most used Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com> SVN-Revision: 42282
* x86: add back a line accidentally removed in r41763Felix Fietkau2014-07-201-0/+1
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 41764
* x86: remove the arbitrary limitation of vmware/virtualbox images to ext4, ↵Felix Fietkau2014-07-201-3/+2
| | | | | | | | select TARGET_IMAGES_PAD instead Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 41763
* config/Config-images.in: enable zlib as the default ubi compressionJohn Crispin2014-06-241-1/+1
| | | | | | | | http://patchwork.openwrt.org/patch/5686/ Signed-off-by: John Crispin <blogic@openwrt.org> SVN-Revision: 41329
* Disable crashlog for UMLSteven Barth2014-06-121-1/+1
| | | | SVN-Revision: 41153
* kernel: fix duplicate KERNEL_PERF_EVENTS with wrong dependencyFelix Fietkau2014-06-061-4/+1
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 41030
* build: set default squashfs block size to 64k for low-memory systemsFelix Fietkau2014-06-021-0/+1
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 40981