aboutsummaryrefslogtreecommitdiffstats
path: root/config
Commit message (Collapse)AuthorAgeFilesLines
...
* hardening: disable user-space SSP for !muslSteven Barth2015-06-291-0/+1
| | | | | | Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46146
* toolchain: add fortify-headers, enable FORTIFY_SOURCE by defaultSteven Barth2015-06-231-0/+1
| | | | | | Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46117
* gcc/musl: rework SSP-supportSteven Barth2015-06-221-2/+2
| | | | | | | | | | | Make musl provide libssp_nonshared.a and make GCC link it unconditionally if musl is used. This should be a no-op if SSP is disabled and seems to be the only reliable way of dealing with SSP over all packages due to the mess that is linkerflags handling in packages. Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46108
* kernel: mitigate cgroups config dependency changesFelix Fietkau2015-06-181-1/+1
| | | | | | | | | | | Memory Resource Controller no longer depends on Resource counters since Kernel version 4.0. 3.18 is the only still supported version needing Resource counters for MEMCG, thus declare the dependency only for that version. Signed-off-by: Daniel Golle <daniel@makrotopia.org> SVN-Revision: 46024
* hardening: enable regular SSP support by defaultSteven Barth2015-06-171-2/+2
| | | | | | Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46020
* hardening: enable RELRO by defaultSteven Barth2015-06-161-0/+1
| | | | | | Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46004
* hardening: enable format security checking by defaultSteven Barth2015-06-161-1/+1
| | | | | | Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46003
* build: enable package list signing by defaultFelix Fietkau2015-05-051-0/+1
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 45614
* build: add integration for managing opkg package feed keysFelix Fietkau2015-04-061-0/+3
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 45286
* config: add an option to enable KPROBEJohn Crispin2015-04-011-0/+17
| | | | | | Signed-off-by: Mathieu Olivari <mathieu@codeaurora.org> SVN-Revision: 45212
* x86: clean up default grub baudrate settingsFelix Fietkau2015-03-291-4/+3
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 45113
* build: remove leftover olpc support codeFelix Fietkau2015-03-281-4/+4
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 45084
* kernel: cleanup seccomp symbol selectionJohn Crispin2015-03-261-7/+5
| | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> SVN-Revision: 45005
* x86: use PARTUUID instead explicitly specifying the device by defaultJo-Philipp Wich2015-03-241-2/+0
| | | | | | | | | | | | | This changes the x86 image generation to match x86_64, using the PARTUUID for the rootfs instead of explicitly configuring the device. It unbreaks KVM with VirtIO, which uses /dev/vda2 instead of /dev/sda2. Tested in QEMU/KVM with VirtIO, VirtualBox and VMware. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net> SVN-Revision: 44966
* build: remove obsolete references to cris and avr32Felix Fietkau2015-03-241-1/+1
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 44965
* kernel: Support kernel options required by systemdJohn Crispin2015-03-211-6/+28
| | | | | | | | | | | | | These kernel options are all likely to be widely useful in this modern age, but are immediately useful for systemd support. c.f. http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/sys-apps/systemd/systemd-9999.ebuild?&view=markup#l118 Adapted from a patch by Adam Porter. Signed-off-by: Jeff Waugh <jdub@bethesignal.org> SVN-Revision: 44929
* config: add function tracersJohn Crispin2015-03-181-0/+20
| | | | | | | | Adds menuconfig options for ftrace function tracers Signed-off-by: Bryan Forbes <bryan@reigndropsfall.net> SVN-Revision: 44878
* buildroot: make it easier to build all kmodsJonas Gorski2015-03-161-1/+5
| | | | | | | | | Split out kmods from ALL to make it easier to create local builds that are compatible kmod-wise with releases. Signed-off-by: Jonas Gorski <jogo@openwrt.org> SVN-Revision: 44830
* kernel: enable open by fhandle syscallsJohn Crispin2015-03-151-0/+6
| | | | | | | | | | | | | | | | | | | | This is needed by many services to function properly and as all modern distributions got it enabled, it starts to be a de-facto standard, i.e. user-space starts to silently depend on it. This also pulls in EXPORTFS, however, the kernel binary size increases only a little. On ARM systems comes down to 800 bytes uncompressed and about 200 bytes compressed size. On MIPS systems it's about 1.2 kB size increase of the LZMA compressed kernel. v2: use menuconfig option instead of just enabling the option Signed-off-by: Daniel Golle <daniel@makrotopia.org> SVN-Revision: 44765
* toolchain: The glorious return of glibc, ver 2.21John Crispin2015-03-121-3/+2
| | | | | | | | | | | It's the eglibc packaging with a bit of spit-polishing. And testing. :-) [blogic: merged glibc and eglibc into 1 and made eglibc a glibc variant] Signed-off-by: Jeff Waugh <jdub@bethesignal.org> Signed-off-by: John Crispin <blogic@openwrt.org> SVN-Revision: 44701
* config: disable kernel tracing on umlNicolas Thill2015-02-111-0/+1
| | | | | | Signed-off-by: Nicolas Thill <nico@openwrt.org> SVN-Revision: 44397
* config: remove CONFIG_BUILD_STATIC_TOOLSJo-Philipp Wich2015-02-061-8/+0
| | | | | | Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 44287
* config: fix typo in Global build settings menuNicolas Thill2015-02-051-2/+2
| | | | | | Signed-off-by: Nicolas Thill <nico@openwrt.org> SVN-Revision: 44258
* config: fix typo in Global build settings menuJohn Crispin2015-01-281-1/+1
| | | | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org> SVN-Revision: 44163
* Support for building an hardened OpenWRTJohn Crispin2015-01-171-9/+79
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Introduce configuration options to build an "hardened" OpenWRT. Options to enable Stack-Smashing Protection, FORTIFY_SOURCE and RELRO have been introduced. uClibc makefile now automatically detects if SSP support is necessary. hostapd makefile has been fixed to use "^" as sed separator since using a comma was problematic when using "-Wl,-z,now" and the like in TARGET_CFLAGS. Currently enabling SSP on user space depends on enabling SSP kernel side, this is due to the fact that TARGET_CFLAGS are used to build kernel modules (at least). Suggestions on how to avoid this are welcome. Using "select" instead of "depends on" doesn't seem to work with choice entries. Tested with a lantiq (WBMR) router, GCC 4.8, uClibc and a subset of the available packages. Needs to be tested with GCC 4.9 and the remaining packages. PIE not currently included. Signed-off-by: Alessandro Di Federico <ale+owrt@clearmind.me> SVN-Revision: 44005
* config: enable EARLY_PRINTK on bcm53xx by defaultRafał Miłecki2015-01-161-0/+1
| | | | | | | | | It's useful for debugging and safe at the same time as we enable it per device. Signed-off-by: Rafał Miłecki <zajec5@gmail.com> SVN-Revision: 43980
* kernel: add SECCOMP to menuconfigJohn Crispin2015-01-081-0/+14
| | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> SVN-Revision: 43888
* packages: fix typo in OpenWrt nameJohn Crispin2014-12-071-1/+1
| | | | | | Signed-off-by: Cezary Jackiewicz <cezary.jackiewicz@gmail.com> SVN-Revision: 43542
* config: use PARTUUID by default on x86_64Jo-Philipp Wich2014-10-271-3/+4
| | | | | | Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 43086
* Kconfig: Fix missing help text in DEVEL config menuHauke Mehrtens2014-09-131-2/+13
| | | | | | | | | | | This patch completes missing help text for some options under CONFIG_DEVEL. Provides help for BINARY_FOLDER and DOWNLOAD_FOLDER, and reduces ambiguity in the help for BUILD_SUFFIX with an example. Signed-off-by: Andrew McDonnell <bugs@andrewmcdonnell.net> SVN-Revision: 42520
* Kconfig: Various typo/grammar/line-length fixes in Config*.in filesHauke Mehrtens2014-09-134-80/+85
| | | | | | | | | | | | | Non-functional changes to config/Config-*.in files, including: * spelling mistakes * inconsistent terminology * grammar * overly long lines in "help" components Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca> SVN-Revision: 42519
* config: enable cgroup freezerLuka Perkov2014-09-101-1/+1
| | | | | | | | This option will be enabled by default only when cgroups support is enabled. Signed-off-by: Luka Perkov <luka@openwrt.org> SVN-Revision: 42464
* PKG_CHECK_FORMAT_SECURITY: add a menuconfig option, disable by defaultJohn Crispin2014-08-251-0/+9
| | | | | | | | | | | The idea is still to enable it by default at some point I've tested all ar71xx packages (except oldpackages) using CONFIG_ALL=y Failing packages have been marked with PKG_CHECK_FORMAT_SECURITY:=0 for now I can test more targets but i have no idea which are the most used Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com> SVN-Revision: 42282
* x86: add back a line accidentally removed in r41763Felix Fietkau2014-07-201-0/+1
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 41764
* x86: remove the arbitrary limitation of vmware/virtualbox images to ext4, ↵Felix Fietkau2014-07-201-3/+2
| | | | | | | | select TARGET_IMAGES_PAD instead Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 41763
* config/Config-images.in: enable zlib as the default ubi compressionJohn Crispin2014-06-241-1/+1
| | | | | | | | http://patchwork.openwrt.org/patch/5686/ Signed-off-by: John Crispin <blogic@openwrt.org> SVN-Revision: 41329
* Disable crashlog for UMLSteven Barth2014-06-121-1/+1
| | | | SVN-Revision: 41153
* kernel: fix duplicate KERNEL_PERF_EVENTS with wrong dependencyFelix Fietkau2014-06-061-4/+1
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 41030
* build: set default squashfs block size to 64k for low-memory systemsFelix Fietkau2014-06-021-0/+1
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 40981
* build: make the squashfs block size configurableFelix Fietkau2014-06-021-1/+6
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 40979
* config/Config-images.in: the ext4 series introduced a regressionJohn Crispin2014-06-021-3/+3
| | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> SVN-Revision: 40951
* include: Allow git kernel branch selectionJohn Crispin2014-06-021-0/+18
| | | | | | | | | This allows the selection of a specific branch in the menuconfig when using a kernel downloaded from GIT. Signed-off-by: Mathieu Olivari <mathieu@qca.qualcomm.com> SVN-Revision: 40946
* config: Remove KERNEL_GIT_LOCAL_REPOSITORY optionJohn Crispin2014-06-021-8/+0
| | | | | | | | | | | | | | | | | | | | The GIT_LOCAL_REPOSITORY option adds the --reference argument to the git clone kernel command line, if KERNEL_GIT_CLONE_URI is set. This option is intended to speed-up the repo creation by using local objets rather than downloading it. However, a local repo can be cloned much faster by setting GIT_LOCAL_REPOSITORY directly to the local tree. In that case, git clone will bypass the normal "git aware" transport mechanism and clone the repository by copying and hardlinking objects rather than downloading it, resulting in a significant speed increase. That makes the GIT_LOCAL_REPOSITORY option pretty useless so we'll just remove it and recommand the usage of KERNEL_GIT_CLONE_URI directly. Signed-off-by: Mathieu Olivari <mathieu@qca.qualcomm.com> SVN-Revision: 40944
* image: ext4: rename config options as these are only used for ext4 image ↵John Crispin2014-06-021-2/+2
| | | | | | | | creation Signed-off-by: Michael Heimpold <mhei@heimpold.de> SVN-Revision: 40926
* image: ext4: allow creation of a journaling filesystemJohn Crispin2014-06-021-0/+7
| | | | | | Signed-off-by: Michael Heimpold <mhei@heimpold.de> SVN-Revision: 40925
* image: ext4: allow to choose a block size for the rootfsJohn Crispin2014-06-021-0/+24
| | | | | | Signed-off-by: Michael Heimpold <mhei@heimpold.de> SVN-Revision: 40924
* image: ext4: move ext4 specific options into submenuJohn Crispin2014-06-021-15/+16
| | | | | | Signed-off-by: Michael Heimpold <mhei@heimpold.de> SVN-Revision: 40923
* kernel: add a config option for enabling /proc/slabinfoFelix Fietkau2014-05-251-0/+11
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 40858
* kernel: add a config option for /proc page monitoring (useful for detailed ↵Felix Fietkau2014-05-251-0/+3
| | | | | | | | memory usage info) Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 40855
* config: don't use /dev/vda2 for kvm guest, its not used since a long timeJo-Philipp Wich2014-05-131-2/+1
| | | | SVN-Revision: 40756
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-18 23:14:26 +0000