more security patches

SVN-Revision: 3493

diff --git a/openwrt/package/base-files/default/etc/sysctl.conf b/openwrt/package/base-files/default/etc/sysctl.conf
index 2e0efcaf4eb17d779aadd60a9647f793a8d38410..a05498cd6c1dfbb92bc3ad8aad1f186ec822b6af 100644 (file)
--- a/openwrt/package/base-files/default/etc/sysctl.conf
+++ b/openwrt/package/base-files/default/etc/sysctl.conf
@@ -1,4 +1,6 @@
 kernel.panic=3
+net.ipv4.conf.default.arp_ignore=1
+net.ipv4.conf.all.arp_ignore=1
 net.ipv4.ip_forward=1
 net.ipv4.icmp_echo_ignore_broadcasts=1
 net.ipv4.icmp_ignore_bogus_error_responses=1

diff --git a/openwrt/target/linux/linux-2.4/patches/brcm/008-gpio_security.patch b/openwrt/target/linux/linux-2.4/patches/brcm/008-gpio_security.patch
deleted file mode 100644 (file)
index affcf5f..0000000
--- a/openwrt/target/linux/linux-2.4/patches/brcm/008-gpio_security.patch
+++ /dev/null
@@ -1,11 +0,0 @@
---- linux-2.4.30/arch/mips/bcm947xx/gpio.c.orig        2006-03-26 06:43:24 -05:00
-+++ linux-2.4.30/arch/mips/bcm947xx/gpio.c     2006-03-26 06:44:00 -05:00
-@@ -135,7 +135,7 @@
-               gpio_file[i].handle = devfs_register(gpio_dir,
-                                                    gpio_file[i].name,
-                                                    DEVFS_FL_DEFAULT, gpio_major, i,
--                                                   S_IFCHR | S_IRUGO | S_IWUGO,
-+                                                   S_IFCHR | S_IRUSR | S_IWUSR,
-                                                    &gpio_fops, NULL);
-       }
- 

diff --git a/openwrt/target/linux/linux-2.4/patches/generic/213-mtd_security.patch b/openwrt/target/linux/linux-2.4/patches/generic/213-mtd_security.patch
index 33659fb39138f3bcda316ffcd1c03a529057d1dd..8420f277b2c2be6cd8cbcc7f7f625766a6ce38c0 100644 (file)
--- a/openwrt/target/linux/linux-2.4/patches/generic/213-mtd_security.patch
+++ b/openwrt/target/linux/linux-2.4/patches/generic/213-mtd_security.patch
@@ -5,7 +5,7 @@
          devfs_rw_handle[mtd->index] = devfs_register(devfs_dir_handle, name,
                          DEVFS_FL_DEFAULT, MTD_BLOCK_MAJOR, mtd->index,
 -                        S_IFBLK | S_IRUGO | S_IWUGO,
-+                        S_IFBLK | S_IRUGO | S_IWUSR,
++                        S_IFBLK | S_IRUSR | S_IWUSR,
                          &mtd_fops, NULL);
  }
  
@@ -16,7 +16,7 @@
        devfs_rw_handle[mtd->index] = devfs_register(devfs_dir_handle, name,
                        DEVFS_FL_DEFAULT, MTD_CHAR_MAJOR, mtd->index*2,
 -                      S_IFCHR | S_IRUGO | S_IWUGO,
-+                      S_IFCHR | S_IRUGO | S_IWUSR,
++                      S_IFCHR | S_IRUSR | S_IWUSR,
                        &mtd_fops, NULL);
  
        sprintf(name, "%dro", mtd->index);