| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
| |
| |
| |
| | |
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
The swconfig kernel infrastructure fails to do any permissions checks when
changing settings. As such an ordinary user account on a device with a
switch can change switch settings without any special permissions.
Routers generally have few non-admin users so this isn't a big hole, but it
is a security hole. Likely the greatest danger is for multifunction devices
which have a lot of extra daemons, compromising a low-security daemon would
allow one to modify switch settings and cause the router/switch to appear to
lock-up (or cause other sorts of troublesome nyetwork behavior).
Implement a check for CAP_NET_ADMIN in swconfig_set_attr() and deny any
requests originating from user contexts lacking this capability.
Reported-by: Elliott Mitchell <ehem+openwrt@m5p.com>
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
|
| |
| |
| |
| |
| |
| | |
Report the translated error to the user if a get/set netlink operation failed.
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Recent versions of Chrome require this ciphers to successfully handshake with
a TLS enabled uhttpd server using the ustream-polarssl backend.
If `CONFIG_GCM` is disabled, `ssl_ciphersuite_from_id()` will return `NULL`
when cipher `0x9d` is looked up, causing the calling `ssl_ciphersuite_match()`
to fail with `POLARSSL_ERR_SSL_INTERNAL_ERROR`.
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
|
| |
| |
| |
| |
| |
| |
| |
| | |
sparse-0.5.0 won't link against lvm 3.5.0 as "llvm-config --libs" does not
include system libs like pthreads. This problem got fixed but not released
yet, so we need to fetch from their git repo.
Signed-off-by: Stefan Sydow <stefan.sydow@tu-berlin.de>
|
| |
| |
| |
| | |
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
|
| |
| |
| |
| | |
Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
|
| |
| |
| |
| | |
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
| |
| |
| |
| | |
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
| |
| |
| |
| |
| |
| |
| | |
This can be used to prevent double compression for platforms where the
boot loader already expects compressed images.
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
| |
| |
| |
| | |
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
| |
| |
| |
| | |
Signed-off-by: Rujun Wang <chinawrj@gmail.com>
|
| |
| |
| |
| |
| |
| | |
command processing
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
| |
| |
| |
| |
| |
| | |
Also collapses the three identical configurations into one block.
Signed-off-by: Claudio Leite <leitec@staticky.com>
|
| |
| |
| |
| |
| |
| | |
manager support
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
| |
| |
| |
| | |
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
| |
| |
| |
| | |
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
| |
| |
| |
| | |
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
| |
| |
| |
| | |
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
| |
| |
| |
| |
| |
| | |
Simplify profile package selection
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
| |
| |
| |
| |
| |
| |
| | |
Disable marvell,nand-keep-config property on WRT1900AC to allow the
flash driver to properly probe the chip
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
| |
| |
| |
| | |
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
| |
| |
| |
| | |
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
| |
| |
| |
| | |
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
| |
| |
| |
| | |
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
| |
| |
| |
| | |
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
| |
| |
| |
| |
| |
| |
| |
| | |
The copy on the mirror has a different md5sum as specified in this
package Makefile. The content of the file on the mirror is the same as
in the checkout so just update our md5sum.
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
|
| |
| |
| |
| |
| |
| |
| | |
Instead of downloading the firmware from some website take it from
linux-firmware package and do not download it separately any more.
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
|
| |
| |
| |
| |
| |
| |
| | |
The package did not pack the firmware because of a problem which looks
like a copy and past error.
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
|
| |
| |
| |
| | |
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
| |
| |
| |
| | |
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
| |
| |
| |
| | |
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
In kernel 4.7 there is upstreamed b53 driver using (mostly?) the same
symbols as our b53 does. Change our symbols so both drivers can coexist
in kernel tree.
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
Acked-by: Jonas Gorski <jonas.gorski@gmail.com>
|
| |
| |
| |
| | |
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
|
| |
| |
| |
| | |
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
|
|\|
| |
| | |
update to 4.4.14, ramips updates ,fix 9pnet compilation
|
| |
| |
| |
| | |
Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
|
| |
| |
| |
| | |
Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
|
| |
| |
| |
| | |
Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Changelog: https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.14
Some manual changes to target/linux/generic/patches-4.4/610-
netfilter_match_bypass_default_checks.patch were needed.
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
|
| |
| |
| |
| | |
Signed-off-by: John Crispin <john@phrozen.org>
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
most symbols should be in Kernel packages
depending on HW the removal of
CONFIG_REALTEK_PHY
and USB symbols might be wrong
compile tested only
Signed-off-by: Dirk Neukirchen <dirkneukirchen@web.de>
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Pinmux for rgmii needs to be set to rgmii, not gpio.
Hide the ESW switch on boot (using new rgmii esw devicetree attribute).
Also add a Sitecom-specific profile, since the image needs to include
the rtl8366 kernel driver.
Signed-off-by: Tobias Diedrich <ranma+openwrt@tdiedrich.de>
|
| |
| |
| |
| | |
Signed-off-by: John Crispin <john@phrozen.org>
|
| |
| |
| |
| |
| | |
Reported-by: Joy Kicer <joykicer@gmail.com>
Signed-off-by: John Crispin <john@phrozen.org>
|
| |
| |
| |
| |
| | |
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
Reviewed-by: Jo-Philipp Wich <jo@mein.io>
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Commit "kernel: mtdsplit: calculate kernel partition precisely for Seama"
changed the kernel partition to only contain the kernel itself and not
the Seama header. Adjust the fixseama call to match what is used on
brcm53xx.
This fixes failing to boot a second time after flashing the factory image
on the affected devices.
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
Reviewed-by: Jo-Philipp Wich <jo@mein.io>
|
| |
| |
| |
| | |
Signed-off-by: Michael Lee <igvtee@gmail.com>
|
| |
| |
| |
| | |
Signed-off-by: Michael Lee <igvtee@gmail.com>
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
* remove mt7620-wm8960.c use simple card and DTS to do it
* add old chips support
* add 12Mhz refclk setup. this is hard code. need use clock framework
rewrite it
* add interrupt error status support for debug. default disable it.
because it cause to many interrupts
* add setup bclk suport not hard code it
* add 24 bits support for mt7628. not verified
* use regmap api to control registers
* add txdma-req/rxdma-req DTS params for DMA use
Signed-off-by: Michael Lee <igvtee@gmail.com>
|