aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* mediatek: use updated device tree overlay mechanism for BPi-R64Daniel Golle2023-06-093-2/+19
| | | | | | | Use new device tree overlay mechanism for the BananaPi BPi-R64 board. Signed-off-by: Daniel Golle <daniel@makrotopia.org> (cherry picked from commit 34bb33094a5e49c727b76b20394d252f3e2ba70d)
* uboot-mediatek: adapt BPi-R3 and BPi-R64 to new device tree overlayDaniel Golle2023-06-092-20/+40
| | | | | | | | | Update bootloader environment for BPi-R3 and BPi-R64 to adapt to new device tree overlay mechanism now that support for multiple device tree overlays has been added. Signed-off-by: Daniel Golle <daniel@makrotopia.org> (cherry picked from commit ec50d2d366fecb6f4bac2ae9d5cfa4aba9cf7bbc)
* generic: use only first element in bootconf for uImage.FITDaniel Golle2023-06-091-7/+15
| | | | | | | | | | Now that it is possible to load several device tree overlays by appending their config names to bootconf the uImage.FIT partition parser need to discard everything after the first '#' character in bootconf when looking up the config node to be used. Signed-off-by: Daniel Golle <daniel@makrotopia.org> (cherry picked from commit 07bca1adaa0de71d0aefcf83bff2e1d90616cd3d)
* image: improve uImage.FIT device tree overlay supportDaniel Golle2023-06-093-8/+22
| | | | | | | | | | | Instead of generating full config nodes incl. kernel, generate minimal config nodes for device tree overlays to be applied to the main config. In this way, multiple device tree overlays can be applied more easily. While at it change filenames to upstream style, ie. use dtso and dtbo suffix for device tree overlays. Signed-off-by: Daniel Golle <daniel@makrotopia.org> (cherry picked from commit 6b01d40bfedb42323a1324e1b5624f192a4c91de)
* mediatek: convert mt7986a-zyxel-ex5601-t0-stock.dts to UNIXDaniel Golle2023-06-091-560/+560
| | | | | | | The device tree file was in DOS format (CR-LF). Convert it to UNIX style. Signed-off-by: Daniel Golle <daniel@makrotopia.org> (cherry picked from commit d28534545edfa29e9529f9c9cd5960889a9d4018)
* mediatek: use existing I2C clock namesDaniel Golle2023-06-092-56/+1
| | | | | | | | | PCK and MCK should really be P=PMIC and M=MEM, which means that they should effectively be CLK_PMIC and CLK_ARB. Suggested-by: AngeloGioacchino Del Regno <angelogioacchino.delregno@collabora.com> Signed-off-by: Daniel Golle <daniel@makrotopia.org> (cherry picked from commit 0580747adab2094862c18b5e762c908dd3b43236)
* mediatek: use cpufreq fix suggested by MediaTekDaniel Golle2023-06-092-29/+53
| | | | | | | | Use suggested fix for mediatek-cpufreq, patch will also be sent upstream. Signed-off-by: Daniel Golle <daniel@makrotopia.org> (cherry picked from commit 7e93f520d6b12bc04391f987b63c633d3b113e26)
* openssl: update to 3.0.9Ivan Pavlov2023-06-095-294/+4
| | | | | | | | | | | | | | | CVE-2023-2650 fix Remove upstreamed patches Major changes between OpenSSL 3.0.8 and OpenSSL 3.0.9 [30 May 2023] * Mitigate for very slow OBJ_obj2txt() performance with gigantic OBJECT IDENTIFIER sub-identities. (CVE-2023-2650) * Fixed buffer overread in AES-XTS decryption on ARM 64 bit platforms (CVE-2023-1255) * Fixed documentation of X509_VERIFY_PARAM_add0_policy() (CVE-2023-0466) * Fixed handling of invalid certificate policies in leaf certificates (CVE-2023-0465) * Limited the number of nodes created in a policy tree (CVE-2023-0464) Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com> (cherry picked from commit 6348850f10545aac70db94d3a9555a4f2eb84281)
* valgrind: update to 3.21.0Hauke Mehrtens2023-06-094-13/+25
| | | | | | | | | | | Release Notes: https://valgrind.org/docs/manual/dist.news.html This improves support for the memory allocator used in musl libc 1.2.2 and later which is currently used by OpenWrt. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> (cherry picked from commit d85013460d47b538389b08506fda49e96a1968b5)
* kselftests-bpf: add kernel BPF testsTony Ambardar2023-06-091-0/+63
| | | | | | | | | | | | | | Build and package kernel self-tests used for BPF testing, program and JIT development. This package, together with the existing 'kmod-bpf-test', was extensively used for past upstream Linux JIT submissions [1]. Currently this includes only 'test_verifier'; building 'test_progs' will fail due to known endian limitations with bpftool skeletons. [1]:https://lore.kernel.org/bpf/cover.1633392335.git.Tony.Ambardar@gmail.com Signed-off-by: Tony Ambardar <itugrok@yahoo.com> (cherry picked from commit 3886ea9b87c416c080078603fedea95bcc144442)
* kernel: backport libcap workaround for BPF selftestsTony Ambardar2023-06-093-0/+433
| | | | | | | | Recent libcap versions (>= 2.60) cause problems with BPF kselftests, so backport an upstream patch that replaces libcap and drops the dependency. Signed-off-by: Tony Ambardar <itugrok@yahoo.com> (cherry picked from commit 04981c716acab6b7a81f672f217e5c47ee42a0b6)
* base-files: enable BPF JIT kallsyms by defaultTony Ambardar2023-06-091-0/+1
| | | | | | | | | | | Set net.core.bpf_jit_kallsyms=1 in /etc/sysctl.d/10-default.conf. For privileged users, this exports addresses of JIT-compiled programs to appear in /proc/kallsyms when present, allowing their use for debugging and in traces. Signed-off-by: Tony Ambardar <itugrok@yahoo.com> (cherry picked from commit b3aaede2a7b14f2be850db8ae0c826e2782a60e8)
* rockchip: add Orange Pi R1 Plus LTS supportTianling Shen2023-06-095-4/+88
| | | | | | | | | | | | The OrangePi R1 Plus LTS is a minor variant of OrangePi R1 Plus with the on-board NIC chip changed from rtl8211e to yt8531c, and otherwise identical to OrangePi R1 Plus. Tested-by: Volkan Yetik <no3iverson@gmail.com> Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org> (cherry picked from commit 32d5921b8b5508a99680ecf1626667517c2cbdb8) [Removed patches for kernel 6.1] Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* uboot-rockchip: add Orange Pi R1 Plus LTS supportTianling Shen2023-06-095-0/+499
| | | | | | | | | Add support for the Xunlong Orange Pi R1 Plus LTS. Manually generated of-platdata files to avoid swig dependency. Tested-by: Volkan Yetik <no3iverson@gmail.com> Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org> (cherry picked from commit 37fed89166e6e21c20ef92b36106f7184a0476c6)
* rockchip: add Orange Pi R1 Plus supportTianling Shen2023-06-097-3/+505
| | | | | | | | | | | | | | | | | Orange Pi R1 Plus is a Rockchip RK3328 based SBC by Xunlong. This device is similar to the NanoPi R2S, and has a 16MB SPI NOR (mx25l12805d). The reset button is changed to directly reset the power supply, another detail is that both network ports have independent MAC addresses. Note: booting from SPI is currently unsupported, you have to install the image on a SD card. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org> (cherry picked from commit ab641efe698f4412319fcbcfe6ffde64c929cd97) [Removed patches for kernel 6.1] Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* uboot-rockchip: add Orange Pi R1 Plus supportTianling Shen2023-06-095-0/+821
| | | | | | | | Add support for the Xunlong Orange Pi R1 Plus. Manually generated of-platdata files to avoid swig dependency. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org> (cherry picked from commit 043f8a4f5ecf00e8a62b5a5d48baba48e620ea6a)
* generic: drop useless binfmt patch fixing compilation warningChristian Marangi2023-06-081-94/+0
| | | | | | | | | | | | | | | | | | The compilation warning was triggered by wrongly set FRAME_WARN to 1024 even for 64bit. This was recently fix by correctly setting the FRAME_WARN to 2048 for 64bit systems. The compilation warning would still be triggered on 32bit system but the actual code is never reached as ARCH_USE_GNU_PROPERTY is only set on arm64 arch. Drop the patch as kmalloc cause perf regression as suggested by upstream maintainers. Fixes: fa79baf4a6e2 ("generic: copy backport, hack, pending patch and config from 5.15 to 6.1") Fixes: 5913ea1ba2fa ("generic: 5.15: add pending patch fixing binfmt compilation warning") Signed-off-by: Christian Marangi <ansuelsmth@gmail.com> (cherry picked from commit 62338f41625074640a4de9e26e5e67b010fe0ebe)
* oxnas: Enable CONFIG_CRYPTO_LZ4Jitao Lu2023-06-081-0/+3
| | | | | | | | | | | | | | | | | | | | | | Previously, CONFIG_LZ4_DECOMPRESS=y was selected by CONFIG_RD_LZ4 only. When building kernel for initramfs, CONFIG_RD_LZ4 will be unset by Kernel/SetInitramfs if the chosen compression method is not lz4, then CONFIG_LZ4_DECOMPRESS will become a *module* in the newly generated kernel config. However, the newly added module won't be built after 38c150612cc9be488527e342db92d5c74093213f, so packaging kmod-lib-lz4 fails due to missing lz4_decompress.ko. CONFIG_CRYPTO_LZ4=y makes CONFIG_LZ4_DECOMPRESS=y being selected w/o CONFIG_RD_LZ4, so that the modules of the default kernel and initramfs kernel are consistent. Fixes: #12766 Fixes: 38c150612cc ("build: revert 54070a1 (all kernels are >= 5.10)") Signed-off-by: Jitao Lu <dianlujitao@gmail.com> (cherry picked from commit cc87f6629b8a120420075cd984a4e6ece6c669df)
* ramips: enable LED button for TP-Link EC330-G5u v1Mikhail Zhilkin2023-06-081-0/+16
| | | | | | | | | | The device already has LED push button (KEY_LIGHTS_TOGGLE) and exported GPIO control "led-light". This commit adds button handler script for switching on/off all device LEDs. Signed-off-by: Mikhail Zhilkin <csharper2005@gmail.com> Signed-off-by: Christian Lamparter <chunkeey@gmail.com> (cherry picked from commit d955b41275eaf93b7600f8eb7d706f40302f26c2)
* openssl: fix uci config for built-in enginesTianling Shen2023-06-081-10/+3
| | | | | | | | | | | | | | | | | | | | | | | | Built-in engine configs are added in libopenssl-conf/install stage already, postinst/add_engine_config is just duplicating them, and due to the lack of `config` header it results a broken uci config: > uci: Parse error (invalid command) at line 3, byte 0 ``` config engine 'devcrypto' option enabled '1' engine 'devcrypto' option enabled '1' option builtin '1' ``` Add `builtin` option in libopenssl-conf/install stage and remove duplicate engine configuration in postinst/add_engine_config to fix this issue. Fixes: 0b70d55a64c39d ("openssl: make UCI config aware of built-in engines") Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org> (cherry picked from commit a0d71934253f599f4ac651b1b3a429901049e802)
* netfilter: fix typo in kmod-nft-dup-inetKevin Darbyshire-Bryant2023-06-081-1/+1
| | | | | | | Fix typo of 'family' in a7e9445975 Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk> (cherry picked from commit 191742eb8ddc4353eedf71a327fb17a11c5a3a99)
* x86/64: Enable IOMMU_V2 support for later CPUsPhilip Prindeville2023-06-081-1/+1
| | | | | | | Support newer IOMMU_V2 on AMD platforms, useful for DPDK and KVM. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com> (cherry picked from commit 1eb02ce3254ef6f115640df8ac470574d6903588)
* kernel: Backport mvneta crash fix to 5.15Marek Behún2023-06-0812-12/+567
| | | | | | | | | | | | | | | | Backport Russell King's series [1] net: mvneta: reduce size of TSO header allocation to pending-5.15 to fix random crashes on Turris Omnia. This also backports two patches that are dependencies to this series: net: mvneta: Delete unused variable net: mvneta: fix potential double-frees in mvneta_txq_sw_deinit() [1] https://lore.kernel.org/netdev/ZCsbJ4nG+So%2Fn9qY@shell.armlinux.org.uk/ Signed-off-by: Marek Behún <kabel@kernel.org> Signed-off-by: Christian Lamparter <chunkeey@gmail.com> (squashed) (cherry picked from commit 7b31c2e9ed4da7bfeecbd393c17c249eca870717)
* apm821xx: mx60: drop nand-is-boot-mediumChristian Lamparter2023-06-081-2/+0
| | | | | | | | it was reported that this flag caused the mx60 not to boot anymore. Fixes: f095822699cc ("apm821xx: convert legacy nand partition layou") Signed-off-by: Christian Lamparter <chunkeey@gmail.com>
* ipq40xx: convert Buffalo WTR-M2133HP to DSAYanase Yuki2023-06-083-2/+31
| | | | | | | This commit convert WTR-M2133HP to DSA setup. Signed-off-by: Yanase Yuki <dev@zpc.sakura.ne.jp> (cherry picked from commit edb3a4162c0763ecc9d5e7660700a68a25bf28e3)
* ipq806x: use new package name for NEC WG2600HP3Yanase Yuki2023-06-081-1/+1
| | | | | | | | | commit 0c45ad41e15e2255 changes ipq806x usb kmod name from usb-phy-qcom-dwc3 to phy-qcom-ipq806x-usb, so use new name. Signed-off-by: Yanase Yuki <dev@zpc.sakura.ne.jp> (cherry picked from commit 93147443502e61d0a824406bef13b0b9fe250f71)
* ubnt-ledbar: depend on mediatek and ramips subtargetsTomasz Maciej Nowak2023-06-081-1/+1
| | | | | | | | It's only used on devices in mt7621 and mt7622 subtargets, so no reason to compile it for others. Signed-off-by: Tomasz Maciej Nowak <tmn505@gmail.com> (cherry picked from commit e81298463ed45cd03d45837c12f4c0a4b85f6cd4)
* ramips: tplink,mr600v2: fix image generation for sysupgrade imageAndreas Böhler2023-06-081-0/+3
| | | | | | | | | | | The MR600v2 does not find its rootfs if it is neither directly after the kernel or aligned to an erase block boundary (64k). This aligns the rootfs to 0x10000 allowing the device to boot again. Based on investigation by forum user relghuar. Signed-off-by: Andreas Böhler <dev@aboehler.at> (cherry picked from commit 46b51e9e992884c81f4838440cd2967e67db3a79)
* netifd: update to the latest versionFelix Fietkau2023-06-071-3/+3
| | | | | | | ec9dba721245 system-linux: fix memory leak in system_bridge_vlan_check Signed-off-by: Felix Fietkau <nbd@nbd.name> (cherry picked from commit 20ce21866e482c132df7085061f28dfdafc8a48a)
* netifd: Fix PKG_MIRROR_HASHHauke Mehrtens2023-06-071-1/+1
| | | | | | | | Fix the PKG_MIRROR_HASH value for netifd. Fixes: d2ecaaca3404 ("netifd: update to version 2023-05-31") Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> (cherry picked from commit 21f713d5abf86fc5639b41d7f4e7535a5538d63a)
* netifd: update to version 2023-05-31Petr Štetiar2023-06-071-3/+3
| | | | | | | | | | | | Contains following changes: * bridge: bridge_dump_info: add dumping of bridge attributes * bridge: make it more clear why the config was applied * cmake: fix build by reordering the cflags definitions * treewide: fix multiple compiler warnings Signed-off-by: Petr Štetiar <ynezz@true.cz> (cherry picked from commit d2ecaaca3404a05ba65bb6756bc5fbd05389ed2f)
* ramips: fix lzma-loader for ASIARF boardsDaniel Danzberger2023-06-071-0/+2
| | | | | | | | This fixes a well known "LZMA ERROR 1" error, reported previously on numerous of similar devices. Signed-off-by: Daniel Danzberger <daniel@dd-wrt.com> (cherry picked from commit 29a5cb7a8b105ca6534bba63edcec48ae935c078)
* sdk: Expose CCACHE_DIR optionJeffery To2023-06-071-0/+7
| | | | | | | | As the CCACHE option is already exposed, it would be helpful to also make the ccache directory easily customizable. Signed-off-by: Jeffery To <jeffery.to@gmail.com> (cherry picked from commit 897691fdce27868aa4c0c68de8b67e8af6f209e1)
* build: export GIT_CEILING_DIRECTORIES for package buildsJeffery To2023-06-072-0/+2
| | | | | | | | | | | | | | | | | | | A package may run git as part of its build process, and if the package source code is not from a git checkout, then git may traverse up the directory tree to find buildroot's repository directory (.git). For instance, Poetry Core, a Python build backend, will read the contents of .gitignore for paths to exclude when creating a Python package. If it finds buildroot's .gitignore file, then Poetry Core will exclude all of the package's files[1]. This exports GIT_CEILING_DIRECTORIES for both package and host builds so that git will not traverse beyond $(BUILD_DIR)/$(BUILD_DIR_HOST). [1]: https://github.com/python-poetry/poetry/issues/5547 Signed-off-by: Jeffery To <jeffery.to@gmail.com> (cherry picked from commit f597f34f3afa7bba8a2606490617688f1cea5a44)
* OpenWrt v23.05.0-rc1: revert to branch defaultsHauke Mehrtens2023-06-075-11/+9
| | | | Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* OpenWrt v23.05.0-rc1: adjust config defaultsv23.05.0-rc1Hauke Mehrtens2023-06-075-9/+11
| | | | Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* kernel: bump 5.15 to 5.15.114John Audia2023-06-032-3/+3
| | | | | | | | | | | All patches automatically rebased. Build system: x86_64 Build-tested: bcm2711/RPi4B, ramips/tplink_archer-a6-v3, filogic/xiaomi_redmi-router-ax6000-ubootmod Run-tested: bcm2711/RPi4B, ramips/tplink_archer-a6-v3, filogic/xiaomi_redmi-router-ax6000-ubootmod Signed-off-by: John Audia <therealgraysky@proton.me> (cherry picked from commit 223004b4d6e5d17c0ae99e15d0f4c591676b4f44)
* kernel: Set CONFIG_FRAME_WARN depending on targetHauke Mehrtens2023-06-026-5/+11
| | | | | | | | | This set the CONFIG_FRAME_WARN option depending on some target settings. It will use the default from the upstream kernel and not the hard coded value of 1024 now. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> (cherry picked from commit 16a20512d852f6ecebf8c57cd7fa2572a06a9d0b)
* ipq40xx: e2600ac-c1 remove KERNEL_SIZE张 鹏2023-05-311-2/+0
| | | | | | | | | | Currently, e2600ac-c1 cannot be built as the kernel is larger than the defined KERNEL_SIZE, however, there is no bootloader limit for the kernel size so remove KERNEL_SIZE completely. Signed-off-by: 张 鹏 <sd20@qxwlan.com> [ improve commit title, fix merge conflict ] Signed-off-by: Christian Marangi <ansuelsmth@gmail.com> (cherry picked from commit b764268acb7ed410d1d81e783f1b0ce407efda82)
* ipq40xx: add e2600ac c2 to dsa张 鹏2023-05-313-2/+44
| | | | | | | | | Convert E2600ac c2 to DSA and enable it. Signed-off-by: 张 鹏 <sd20@qxwlan.com> [ rename port to more generic name ] Signed-off-by: Christian Marangi <ansuelsmth@gmail.com> (cherry picked from commit 0dca52cf595cedcabec5d384ddc83f1954cca46d)
* ipq40xx: add e2600ac c1 to dsa张 鹏2023-05-313-2/+36
| | | | | | | | | Convert E2600ac c1 to DSA and enable it. Signed-off-by: 张 鹏 <sd20@qxwlan.com> [ rename port to more generic name ] Signed-off-by: Christian Marangi <ansuelsmth@gmail.com> (cherry picked from commit 7f2ecab0f4623e9b437b1a6656275695ac063fe4)
* airoha: spi-en7523: Fix compile warningHauke Mehrtens2023-05-311-1/+3
| | | | | | | | The set_spi_clock_speed() function is not used, this causes a compile warning which results in a build error with -WError. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> (cherry picked from commit 2d5f3b3c4ce4c6221299f2362b3029783048f649)
* selinux-policy: update to 1.2.5Linhui Liu2023-05-312-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | 30d503a uci jsonfilter: pipe and leak e13cb64 rpcd leds 144781f jsonfilter, luci, ubus 1210762 rpcd and all agents get fd's leaked ab9227c rpcd 2f99e0e luci rpcd b43aaf3 rpcd (enable/disable services) luci peeraddr f20f03e rpcd 7bc74f6 rpcd reads all subj state and luci-bwc leaks 9634b17 adds inotify perms to anon_inode 3d3c17c adds bare anon_inode (linux 5.15) 7104b20 dnsmasq and luci 0de2c66 luci,rpcd, ucode, wpad 14f5cf9 luci and ucode e3ce84c rpcd, ucode and cgiio loose ends 96a2401 misc updates 9fe0490 initscript: remove redundant rules 71bd77e allow all init scripts to log to logd f697331 sandbox: make ttydev handling more robust a471877 simplify pty tty console access f738984 sandbox: also remove TIOSCTI from all ttydevs Signed-off-by: Linhui Liu <liulinhui36@gmail.com> (cherry picked from commit 4c5a9da8699a7982b8f03b28561f955d9d1313f1)
* ca-certificates: Update to version 20230311Tianling Shen2023-05-312-13/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update the ca-certificates and ca-bundle package from version 20211016 to version 20230311. Use TAR_OPTIONS instead of hacking Build/Prepare, refresh patches. Debian change-log entry [1]: |[...] |[ Đoàn Trần Công Danh ] |* ca-certificates: compat with non-GNU mktemp (closes: #1000847) | |[ Ilya Lipnitskiy ] |* certdata2pem.py: use UTC time when checking cert validity | |[ Julien Cristau ] |* Update Mozilla certificate authority bundle to version 2.60 | The following certificate authorities were added (+): | + "Autoridad de Certificacion Firmaprofesional CIF A62634068" | + "Certainly Root E1" | + "Certainly Root R1" | + "D-TRUST BR Root CA 1 2020" | + "D-TRUST EV Root CA 1 2020" | + "DigiCert TLS ECC P384 Root G5" | + "DigiCert TLS RSA4096 Root G5" | + "E-Tugra Global Root CA ECC v3" | + "E-Tugra Global Root CA RSA v3" | + "HARICA TLS ECC Root CA 2021" | + "HARICA TLS RSA Root CA 2021" | + "HiPKI Root CA - G1" | + "ISRG Root X2" | + "Security Communication ECC RootCA1" | + "Security Communication RootCA3" | + "Telia Root CA v2" | + "TunTrust Root CA" | + "vTrus ECC Root CA" | + "vTrus Root CA" | The following certificate authorities were removed (-): | - "Cybertrust Global Root" (expired) | - "EC-ACC" | - "GlobalSign Root CA - R2" (expired) | - "Hellenic Academic and Research Institutions RootCA 2011" | - "Network Solutions Certificate Authority" | - "Staat der Nederlanden EV Root CA" (expired) |* Drop trailing space from debconf template causing misformatting | (closes: #980821) | |[ Wataru Ashihara ] |* Make certdata2pem.py compatible with cryptography >= 35 (closes: #1008244) |[...] [1]: https://metadata.ftp-master.debian.org/changelogs/main/c/ca-certificates/ca-certificates_20230311_changelog Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org> (cherry picked from commit 7c83b6ac8656f9a3b005554d25857e8ed5faf3f6)
* pcre2: fix host compilation of libselinux by enabling PICPetr Štetiar2023-05-311-1/+2
| | | | | | | | | | | | | | | libselinux-3.5 fails to compile in Fedora 38 container due to the following: cc -O2 -I/openwrt/staging_dir/host/include -I/openwrt/staging_dir/hostpkg/include -I/openwrt/staging_dir/target-x86_64_musl/host/include -I../include -D_GNU_SOURCE -DNO_ANDROID_BACKEND -DUSE_PCRE2 -DPCRE2_CODE_UNIT_WIDTH=8 -I/openwrt/staging_dir/hostpkg/include -L/openwrt/staging_dir/host/lib -L/openwrt/staging_dir/hostpkg/lib -L/openwrt/staging_dir/target-x86_64_musl/host/lib -Wl,-rpath=/openwrt/staging_dir/hostpkg/lib -shared -o libselinux.so.1 avc.lo avc_internal.lo avc_sidtab.lo booleans.lo callbacks.lo canonicalize_context.lo checkAccess.lo check_context.lo checkreqprot.lo compute_av.lo compute_create.lo compute_member.lo compute_relabel.lo compute_user.lo context.lo deny_unknown.lo disable.lo enabled.lo fgetfilecon.lo freecon.lo freeconary.lo fsetfilecon.lo get_context_list.lo get_default_type.lo get_initial_context.lo getenforce.lo getfilecon.lo getpeercon.lo init.lo is_customizable_type.lo label.lo label_db.lo label_file.lo label_media.lo label_support.lo label_x.lo lgetfilecon.lo load_policy.lo lsetfilecon.lo mapping.lo matchmediacon.lo matchpathcon.lo policyvers.lo procattr.lo query_user_context.lo regex.lo reject_unknown.lo selinux_check_securetty_context.lo selinux_config.lo selinux_internal.lo selinux_restorecon.lo sestatus.lo setenforce.lo setexecfilecon.lo setfilecon.lo setrans_client.lo seusers.lo sha1.lo stringrep.lo validatetrans.lo -L/openwrt/staging_dir/hostpkg/lib -lpcre2-8 -lfts -ldl -Wl,-soname,libselinux.so.1,--version-script=libselinux.map,-z,defs,-z,relro /usr/bin/ld: /openwrt/staging_dir/hostpkg/lib/libpcre2-8.a(pcre2_compile.c.o): relocation R_X86_64_32S against symbol `_pcre2_ucd_stage1_8' can not be used when making a shared object; recompile with -fPIC /usr/bin/ld: failed to set dynamic section sizes: bad value So lets fix it by enabling build of host static library with the position independent code option enabled. Signed-off-by: Petr Štetiar <ynezz@true.cz> (cherry picked from commit 12494f5b8a7bb48cbf7b2fba7d17a53981173120)
* netfilter: add kmod-nft-dup-inetMichał Kwiatek2023-05-311-1/+21
| | | | | | | Add kmod-nft-dup-inet package to allow packet duplication in ip/ip6/inet nftables family Signed-off-by: Michał Kwiatek <michal@kwiatek.it> (cherry picked from commit a7e9445975f832db887e6044d7e84220d2a68cf1)
* Revert "feeds: use git-src-full to allow Git versioning"Petr Štetiar2023-05-311-4/+4
| | | | | | | | | | | | This partially reverts commit 7fae1e5677e9bb4979c8d4ac99be4de6955b13d0 as it should be no longer necessary to do a full clone since commit 48ed07bc0b94 ("treewide: replace AUTORELEASE with real PKG_RELEASE"). Suggested-by: Thibaut VARÈNE <hacks@slashdirt.org> Signed-off-by: Petr Štetiar <ynezz@true.cz> (cherry picked from commit 11bb5337b8d8b5018e48f0df415efb99e2f49d0d) [adjusted to 23.05] Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
* x86: disable CONFIG_X86_PLATFORM_DRIVERS_HPJohn Audia2023-05-291-0/+1
| | | | | | | New config option defaulted to N for this bump. Signed-off-by: John Audia <therealgraysky@proton.me> (cherry picked from commit 3664c57e34454ce50ac7ab6de9e3983a86cde052)
* ramips: correct page read return value of the mt7621 nand driverShiji Yang2023-05-291-5/+9
| | | | | | | | | | | | | | read_page() need to return maximum number of bitflips instead of the accumulated number. Change takes from upstream mt7621 u-boot [1]. * @read_page: function to read a page according to the ECC generator * requirements; returns maximum number of bitflips * corrected in any single ECC step, -EIO hw error [1] https://lore.kernel.org/all/cover.1653015383.git.weijie.gao@mediatek.com/ Signed-off-by: Shiji Yang <yangshiji66@qq.com> (cherry picked from commit 2fbb91d73ffecc7d033e5bb0b550d664ef9e0f91)
* base-files: x86 fix 01_leds Syntax errorStan Grishin2023-05-291-1/+1
| | | | | | | | | | | | Cezary Jackiewicz reported: | Syntax error in line /etc/board.d/01_leds#L22 - missing "\" Fixes: c191c2d46f00 ("x86: base-files add support for Sophos 135r3/135r3w") Reported-by: Cezary Jackiewicz <cezary@eko.one.pl> Signed-off-by: Stan Grishin <stangri@melmac.ca> (buffed up commit message) Signed-off-by: Christian Lamparter <chunkeey@gmail.com> (cherry picked from commit 4b8b2f4f978d6df586dd7ce4dcc3e1286b93bd48)
generated by cgit v1.2.3 (git 2.25.1) at 2025-04-08 04:50:57 +0000