Josh Bendavid [Tue, 14 Jun 2016 13:07:21 +0000 (15:07 +0200)]
Revert "ipq806x: add mangle bootargs options in config-4.4"
This reverts commit
53147c2237231842b4d185f69c2bc0d79aff8b85.
These config changes break booting on C2600 and probably other devices.
Signed-off-by: Josh Bendavid <joshbendavid@gmail.com>
John Crispin [Sun, 15 May 2016 07:44:34 +0000 (09:44 +0200)]
octeon: convert to new image building code
Signed-off-by: John Crispin <john@phrozen.org>
John Crispin [Tue, 14 Jun 2016 06:37:52 +0000 (08:37 +0200)]
mediatek/ralink: fix boardnames
Signed-off-by: John Crispin <john@phrozen.org>
Alexander Couzens [Wed, 15 Jun 2016 05:12:45 +0000 (22:12 -0700)]
tools: build msdostools for omap
omap requires msdos partition to boot from sdcard.
Prepare for upcoming full sdcard image generation.
Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
Dirk Neukirchen [Sat, 4 Jun 2016 16:36:27 +0000 (18:36 +0200)]
omap: remove NAMESPACES config symbols
they are available in config/Config-kernel.in
Signed-off-by: Dirk Neukirchen <dirkneukirchen@web.de>
Dirk Neukirchen [Sat, 4 Jun 2016 16:35:09 +0000 (18:35 +0200)]
omap: remove XFRM config symbols
Signed-off-by: Dirk Neukirchen <dirkneukirchen@web.de>
Dirk Neukirchen [Sat, 4 Jun 2016 16:35:02 +0000 (18:35 +0200)]
omap: remove config symbol W1
it is available as module
Signed-off-by: Dirk Neukirchen <dirkneukirchen@web.de>
Dirk Neukirchen [Sat, 4 Jun 2016 16:34:16 +0000 (18:34 +0200)]
omap: remove config symbol NETFILTER
Signed-off-by: Dirk Neukirchen <dirkneukirchen@web.de>
Dirk Neukirchen [Sat, 4 Jun 2016 16:34:09 +0000 (18:34 +0200)]
omap: remove BMP085 symbol
BMP085 is a pressure sensor and available as module
Signed-off-by: Dirk Neukirchen <dirkneukirchen@web.de>
Alexander Couzens [Sat, 11 Jun 2016 02:12:38 +0000 (04:12 +0200)]
tools/mkfwimage2: remove 256 length limit for partition images
Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
John Crispin [Tue, 14 Jun 2016 06:34:05 +0000 (08:34 +0200)]
lantiq: the io space was still not big enough for UHCI
Signed-off-by: John Crispin <john@phrozen.org>
John Crispin [Tue, 14 Jun 2016 03:11:54 +0000 (05:11 +0200)]
lantiq: add ARV4525PW wifi led
Signed-off-by: John Crispin <john@phrozen.org>
John Crispin [Tue, 14 Jun 2016 03:00:48 +0000 (05:00 +0200)]
lantiq: fix VG3503J loader generation
Signed-off-by: John Crispin <john@phrozen.org>
John Crispin [Mon, 13 Jun 2016 19:50:13 +0000 (21:50 +0200)]
lantiq: fix fritz7320 wifi support
Signed-off-by: John Crispin <john@phrozen.org>
John Crispin [Fri, 3 Jun 2016 11:13:55 +0000 (13:13 +0200)]
lantiq: fix io_space_limit
this broke uhci pci support on some arv units
Signed-off-by: John Crispin <john@phrozen.org>
Jo-Philipp Wich [Tue, 14 Jun 2016 12:31:15 +0000 (14:31 +0200)]
ramips: fix kmod-sound-mt7620 packaging
Commit
9ff8928bb9c28be701eb963e591afcfd54b9d8c9 renamed the snd-soc-mt7620-i2s
driver and dropped snd-soc-mt7620-wm8960 which selected CONFIG_SND_SOC_WM8960
breaking all ramips builds due to undefined kernel config symbols.
Rework the kmod-sound-mt7620 package to explicitely select the
CONFIG_SND_SOC_WM8960 symbols and change it to bundle the renamed .ko file.
Also remove the @BROKEN flag and exclude it on the rt288x subtarget instead.
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Rafał Miłecki [Tue, 14 Jun 2016 10:19:25 +0000 (12:19 +0200)]
bcm53xx: refresh kernel config
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
Felix Fietkau [Tue, 14 Jun 2016 08:44:56 +0000 (10:44 +0200)]
Revert "ar71xx: enable flow control for ethernet MACs with built-in switch"
This reverts commit
1beb5bec6453abb220c5be4ddb9e6dc02d08d735.
It was found to cause the WAN port to fail on some AR934x devices
Signed-off-by: Felix Fietkau <nbd@nbd.name>
John Crispin [Mon, 13 Jun 2016 19:39:14 +0000 (21:39 +0200)]
brcm47xx: add the small_Flash feature
Signed-off-by: John Crispin <john@phrozen.org>
John Crispin [Mon, 13 Jun 2016 19:37:20 +0000 (21:37 +0200)]
ath25: add the small_Flash feature
Signed-off-by: John Crispin <john@phrozen.org>
John Crispin [Mon, 13 Jun 2016 19:35:03 +0000 (21:35 +0200)]
config: add a small_flash feature
this causes KALLSYMS to be off by default
Signed-off-by: John Crispin <john@phrozen.org>
John Crispin [Mon, 13 Jun 2016 19:13:41 +0000 (21:13 +0200)]
lantiq: fix ARV452CQW button gpio setup
Signed-off-by: John Crispin <john@phrozen.org>
John Crispin [Mon, 13 Jun 2016 18:24:45 +0000 (20:24 +0200)]
lantiq: add AVM image mageic to sysupgrade script
Signed-off-by: John Crispin <john@phrozen.org>
John Crispin [Mon, 13 Jun 2016 17:04:56 +0000 (19:04 +0200)]
package/lantiq: make lantiq kernel modules work with xway_legacy
Signed-off-by: John Crispin <john@phrozen.org>
John Crispin [Mon, 13 Jun 2016 17:04:20 +0000 (19:04 +0200)]
lantiq: add xway_legacy target
due to bloat recent builds fail to fit into the flash of the old danube units
Signed-off-by: John Crispin <john@phrozen.org>
John Crispin [Mon, 13 Jun 2016 15:18:50 +0000 (17:18 +0200)]
lantiq: gpio-export fails to build if GPIO_SYSFS is not enabled
Signed-off-by: John Crispin <john@phrozen.org>
John Crispin [Mon, 13 Jun 2016 15:15:27 +0000 (17:15 +0200)]
fstools: split snapshot-tool into its own package
Signed-off-by: John Crispin <john@phrozen.org>
John Crispin [Sun, 12 Jun 2016 01:10:28 +0000 (03:10 +0200)]
fstools: remove bogus warning in the fstab script
/etc/init.d/fstab had some warnings in it to let users know that they
should call "block mount" directly. these ended up in the bootlog.
fix this by splitting the code into boot() and start(). this way the system
will boot without warning but manually starting the script will lead to the
message.
fixes FS#3
Reported-by: Hannu Nyman <hannu.nyman@iki.fi>
Signed-off-by: John Crispin <john@phrozen.org>
Magnus Kroken [Sun, 12 Jun 2016 21:49:42 +0000 (23:49 +0200)]
openvpn: update to 2.3.11
Security fixes:
* Fixed port-share bug with DoS potential
* Fix buffer overflow by user supplied data
Full changelog: https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn23#OpenVPN2.3.11
Signed-off-by: Magnus Kroken <mkroken@gmail.com>
Arne Zachlod [Sun, 12 Jun 2016 16:17:28 +0000 (18:17 +0200)]
ar71xx: mach-ubnt-xm.c convert patches to mach file
Signed-off-by: Arne Zachlod <arne@nerdkeller.org>
Henryk Heisig [Sun, 12 Jun 2016 21:49:02 +0000 (23:49 +0200)]
tools/firmware-utils: Add Archer C50 to mktplinkfw2
Signed-off-by: Henryk Heisig <hyniu@o2.pl>
Henryk Heisig [Sun, 12 Jun 2016 21:46:35 +0000 (23:46 +0200)]
ramips/image: Add Archer C50 to mt7620 Makefile
Signed-off-by: Henryk Heisig <hyniu@o2.pl>
Henryk Heisig [Sun, 12 Jun 2016 21:43:51 +0000 (23:43 +0200)]
ramips/base-files: Add support for Archer C50
Signed-off-by: Henryk Heisig <hyniu@o2.pl>
Henryk Heisig [Sun, 12 Jun 2016 21:37:04 +0000 (23:37 +0200)]
ramips/dts: Add support for Archer C50
Signed-off-by: Henryk Heisig <hyniu@o2.pl>
John Crispin [Sat, 11 Jun 2016 13:05:52 +0000 (15:05 +0200)]
lantiq: Add Support for Fritz!Box 7360 SL
Signed-off-by: Sebastian Ortwein <krone@animeland.de>
Tested-by: Guido Lipke <lipkegu@gmail.com>
Yousong Zhou [Thu, 9 Jun 2016 02:04:24 +0000 (10:04 +0800)]
strace: add option for enabling stack trace support
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Yousong Zhou [Thu, 9 Jun 2016 02:04:23 +0000 (10:04 +0800)]
libunwind: initial version 1.1
The package Makefile was based on work at link [1] with the following
changes
1. Disable minidebuginfo support thus no dependency on liblzma
2. Add 2 patches for building against musl-libc and building with
mips16 enabled
3. Add LICENSE and DEPENDS info, etc.
[1] https://github.com/rpi-openwrt/rpi-packages/tree/master/libs/libunwind
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Michael Lee [Sat, 28 May 2016 14:22:10 +0000 (22:22 +0800)]
ramips: add support for DuZun DM06
DuZun DM06 is a develop board based on mt7628
64M RAM, 8M SPI Flash, 1 WAN, 1 LAN.
wm8960 codec with line out, line in and speaker output.
Signed-off-by: Michael Lee <igvtee@gmail.com>
Michael Lee [Sat, 21 May 2016 13:12:53 +0000 (21:12 +0800)]
ramips: enable wm8960 kernel menuconfig select option
Signed-off-by: Michael Lee <igvtee@gmail.com>
Michael Lee [Tue, 17 May 2016 13:13:35 +0000 (21:13 +0800)]
ramips: add i2s clocks
Signed-off-by: Michael Lee <igvtee@gmail.com>
Michael Lee [Mon, 22 Feb 2016 12:49:25 +0000 (20:49 +0800)]
ramips: update i2s dtsi files
Signed-off-by: Michael Lee <igvtee@gmail.com>
Michael Lee [Sun, 15 May 2016 14:59:25 +0000 (22:59 +0800)]
ramips: improve i2s drivers
* remove mt7620-wm8960.c use simple card and DTS to do it
* add old chips support
* add 12Mhz refclk setup. this is hard code. need use clock framework
rewrite it
* add interrupt error status support for debug. default disable it.
because it cause to many interrupts
* add setup bclk suport not hard code it
* add 24 bits support for mt7628. not verified
* use regmap api to control registers
* add txdma-req/rxdma-req DTS params for DMA use
Signed-off-by: Michael Lee <igvtee@gmail.com>
Michael Lee [Fri, 8 Jan 2016 13:15:27 +0000 (21:15 +0800)]
ramips: add i2c clock
Signed-off-by: Michael Lee <igvtee@gmail.com>
Michael Lee [Thu, 7 Jan 2016 14:27:45 +0000 (22:27 +0800)]
ramips: update i2c dtsi files
Signed-off-by: Michael Lee <igvtee@gmail.com>
Michael Lee [Thu, 7 Jan 2016 13:50:24 +0000 (21:50 +0800)]
ramips: update i2c drivers
* add rt_i2c structure to store driver data
* rewrite read/write check function and add i2c error status check.
so we don't need to wait until time out.
* add 10 bits address support. according to the data sheet i think
it is possible. but i haven't verify it.
* the most important is start transfer only need once. otherwise
it cause I2C_STARTERR status.
* add set i2c clock speed register by dts options "clock-frequency".
not just hard code it.
* add mt7621 i2c driver. i just copy i2c-ralink.c and change register
names. and the hardware don't support error status. so i remove it.
but the logic is the same.
Signed-off-by: Michael Lee <igvtee@gmail.com>
Michael Lee [Wed, 2 Dec 2015 13:41:22 +0000 (21:41 +0800)]
ramips: add gdma hsdma dts info
Signed-off-by: Michael Lee <igvtee@gmail.com>
Michael Lee [Wed, 2 Dec 2015 13:35:08 +0000 (21:35 +0800)]
ramips: enhance dma engine support
* fix compiler error. device_control operation not support now.
* add old chips support 8 channels. new chips support 16 channels.
* add mt7621 hsdma driver. data sheet says it has two channels.
but after test only one channel support.
* add memory to memory DMA support. i use dmatest kernel module to
verify this function. on rt305x it will copy more data. on mt7621
only two channels can works at the same time. these two chips
maybe have hardware bugs. because on other chips don't have these bugs.
* use tasklet to handle remaining dma requests.
Signed-off-by: Michael Lee <igvtee@gmail.com>
John Crispin [Thu, 9 Jun 2016 15:39:05 +0000 (17:39 +0200)]
feeds.conf.default: disable management feed
looks like the upstream source packages were un-published.
Signed-off-by: John Crispin <john@phrozen.org>
John Crispin [Tue, 7 Jun 2016 22:22:16 +0000 (00:22 +0200)]
ubox: update to latest git HEAD
this adds the new getrandom wrapper tool
Signed-off-by: John Crispin <john@phrozen.org>
Alexey Brodkin [Thu, 9 Jun 2016 09:38:34 +0000 (12:38 +0300)]
toolchain/gdb: Use correct folder name for ARC patches
Even though ARC tools were released as arc-2016.03
we have a little bit different version name for GDB.
That's because both Binutils and GDB come from the same
git repo but from different branches (and so different tags).
Also removing an extra patch that made its way into release.
Signed-off-by: Alexey Brodkin <abrodkin@synopsys.com>
Alexey Brodkin [Wed, 8 Jun 2016 06:50:55 +0000 (09:50 +0300)]
package/devel/gdb-arc: Add target GDB for ARC
ARC port of GDB is not yet upstream so we need to use
sources from Synopsys GitHub repo.
Given Synopys' commitment to upstream ARC support in GDB
in the nearest future it might be simpler to add a separate
package for ARC GDB instead of patching generic GDB package.
This way once ARC GDB stuff gets uptreamed we'll only need
to remove that new "gdb-arc" package.
Note 1 very minor change in generic gdb package was done -
it now depends on !arc (while "gdb-arc" depends on "arc").
Signed-off-by: Alexey Brodkin <abrodkin@synopsys.com>
John Crispin [Tue, 7 Jun 2016 19:00:28 +0000 (21:00 +0200)]
ipq806x: move dts file to the files folder
Signed-off-by: John Crispin <john@phrozen.org>
John Crispin [Tue, 7 Jun 2016 18:33:35 +0000 (20:33 +0200)]
ipg806x: set v4.4 as default
Signed-off-by: John Crispin <john@phrozen.org>
Adrian Panella [Wed, 25 May 2016 19:06:54 +0000 (14:06 -0500)]
ipq806x: add mangle bootargs options in config-4.4
Add config options to manage dual boot partitions, using MANGLE BOOTARGS
Signed-off-by: Adrian Panella <ianchi74@outlook.com>
Adrian Panella [Fri, 13 May 2016 06:13:15 +0000 (01:13 -0500)]
ipq806x: base-files: add support for Linksys EA8500
Signed-off-by: Adrian Panella <ianchi74@outlook.com>
John Crispin [Tue, 7 Jun 2016 17:29:10 +0000 (19:29 +0200)]
ipq806x: build Linksys EA8500 images
Signed-off-by: Adrian Panella <ianchi74@outlook.com>
Adrian Panella [Mon, 30 May 2016 19:56:50 +0000 (14:56 -0500)]
ipq806x: qcom rpm fix support for smb208
In commit "regulator: qcom: Rework to single platform device" the smb208
regulator used in IPQ8064 was left out.
Add it to that new framework and update Docs and DT accordingly.
Signed-off-by: Adrian Panella <ianchi74@outlook.com>
John Crispin [Tue, 7 Jun 2016 17:19:01 +0000 (19:19 +0200)]
uboot-envtools: add ipq806x support
Signed-off-by: Adrian Panella <ianchi74@outlook.com>
Adrian Panella [Thu, 19 May 2016 14:45:38 +0000 (09:45 -0500)]
mtd: add linksys_bootcount for ipq806x
Reset bc is needed for Linksys EA8500's dual boot.
Signed-off-by: Adrian Panella <ianchi74@outlook.com>
Adrian Panella [Mon, 16 May 2016 07:10:56 +0000 (02:10 -0500)]
mac80211: ath10k fix otp check patch
Fix patch to match new updated package version
Signed-off-by: Adrian Panella <ianchi74@outlook.com>
John Crispin [Tue, 7 Jun 2016 16:59:52 +0000 (18:59 +0200)]
lantiq: use new property name for eiu irqs
Signed-off-by: John Crispin <john@phrozen.org>
John Crispin [Tue, 7 Jun 2016 16:56:51 +0000 (18:56 +0200)]
lantiq: fix a regression in the eiu irq loading code
this worked in 3.18 but broke at some point. the old code that loaded a
irq table was incorrewct anyhow as it mapped the irqs int he domain which
should really be done when the driver using them loads them and not the
irq driver itself.
Signed-off-by: John Crispin <john@phrozen.org>
John Crispin [Tue, 7 Jun 2016 16:59:26 +0000 (18:59 +0200)]
lantiq: add default lan setup to board.d script
Signed-off-by: John Crispin <john@phrozen.org>
John Crispin [Mon, 6 Jun 2016 19:16:47 +0000 (21:16 +0200)]
package/*: update git urls for project repos
Signed-off-by: John Crispin <john@phrozen.org>
Rafał Miłecki [Fri, 10 Jun 2016 12:38:04 +0000 (14:38 +0200)]
oseama: support extracting entity
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
Rafał Miłecki [Fri, 10 Jun 2016 12:30:57 +0000 (14:30 +0200)]
bcm53xx: sysupgrade: move TRX specific code to separated function
This will allow adding support for other formats (e.g. Seama) in a clean
way.
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
Felix Fietkau [Mon, 13 Jun 2016 10:43:34 +0000 (12:43 +0200)]
ar71xx: enable flow control for ethernet MACs with built-in switch
Should fix LAN speed issues on some devices
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Sun, 12 Jun 2016 13:38:54 +0000 (15:38 +0200)]
lantiq: add VLAN handling fixes to xrx200 ethernet driver
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Sun, 12 Jun 2016 13:38:19 +0000 (15:38 +0200)]
lantiq: fold 0400-xrx200-net-multi-phy.patch into 0025-NET-MIPS-lantiq-adds-xrx200-net.patch
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Pavel Kubelun [Thu, 9 Jun 2016 16:18:14 +0000 (20:18 +0400)]
ath10k-firmware: add QCA9984 firmware
Signed-off-by: Pavel Kubelun <be.dissent@gmail.com>
Stefan Sydow [Thu, 9 Jun 2016 11:24:39 +0000 (13:24 +0200)]
sparse: update to support llvm 3.5.0
sparse-0.5.0 won't link against lvm 3.5.0 as "llvm-config --libs" does not
include system libs like pthreads. This problem got fixed but not released
yet, so we need to fetch from their git repo.
Signed-off-by: Stefan Sydow <stefan.sydow@tu-berlin.de>
Álvaro Fernández Rojas [Sun, 12 Jun 2016 09:49:46 +0000 (11:49 +0200)]
kernel: update kernel 4.4 to version 4.4.13
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
Felix Fietkau [Sun, 12 Jun 2016 12:52:08 +0000 (14:52 +0200)]
lantiq: change xrx200 ethernet driver WRED signal to global to fix spurious packet loss issues
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Sun, 12 Jun 2016 10:39:35 +0000 (12:39 +0200)]
uboot-envtools: add config for WBMR300 (lantiq)
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Sun, 12 Jun 2016 10:03:11 +0000 (12:03 +0200)]
kernel: require admin permissions for swconfig set operations
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Tue, 7 Jun 2016 12:11:13 +0000 (14:11 +0200)]
kernel: merge pending fq_codel backlog accounting fix
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Tue, 7 Jun 2016 11:27:26 +0000 (13:27 +0200)]
ath10k: merge some pending stability fixes
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Thu, 9 Jun 2016 17:21:26 +0000 (19:21 +0200)]
lantiq: enable swconfig LED support
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Thu, 9 Jun 2016 15:03:41 +0000 (17:03 +0200)]
lantiq: enable SMP for XRX200
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Thu, 9 Jun 2016 14:51:39 +0000 (16:51 +0200)]
lantiq: add Buffalo WBMR-300HPD support
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Thu, 9 Jun 2016 15:02:22 +0000 (17:02 +0200)]
lantiq: refresh xrx200 kernel config
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Thu, 9 Jun 2016 17:18:32 +0000 (19:18 +0200)]
lantiq: remove dummy ltq_machine_power_off to fix gpio-poweroff drivers
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Thu, 9 Jun 2016 17:09:23 +0000 (19:09 +0200)]
kernel: fix mips MT_SMP kernel crash on cache flush
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Jo-Philipp Wich [Sat, 11 Jun 2016 01:18:07 +0000 (03:18 +0200)]
polarssl: enable AES-GCM and CAMELLIA-GCM ciphersuites
Recent versions of Chrome require this ciphers to successfully handshake with
a TLS enabled uhttpd server using the ustream-polarssl backend.
If `CONFIG_GCM` is disabled, `ssl_ciphersuite_from_id()` will return `NULL`
when cipher `0x9d` is looked up, causing the calling `ssl_ciphersuite_match()`
to fail with `POLARSSL_ERR_SSL_INTERNAL_ERROR`.
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Rafał Miłecki [Fri, 10 Jun 2016 11:09:10 +0000 (13:09 +0200)]
bcm53xx: pass datasize to mtd in hexadecimal format
This avoids extra calculation in bash script.
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
Rafał Miłecki [Fri, 10 Jun 2016 11:08:38 +0000 (13:08 +0200)]
mtd: fix typo in error message for 'c' option
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
Rafał Miłecki [Fri, 10 Jun 2016 11:03:44 +0000 (13:03 +0200)]
bcm53xx: fix partition typos in 09_fix_crc
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
Jo-Philipp Wich [Fri, 10 Jun 2016 22:53:16 +0000 (00:53 +0200)]
kernel: deny swconfig set requests for unprivileged users
The swconfig kernel infrastructure fails to do any permissions checks when
changing settings. As such an ordinary user account on a device with a
switch can change switch settings without any special permissions.
Routers generally have few non-admin users so this isn't a big hole, but it
is a security hole. Likely the greatest danger is for multifunction devices
which have a lot of extra daemons, compromising a low-security daemon would
allow one to modify switch settings and cause the router/switch to appear to
lock-up (or cause other sorts of troublesome nyetwork behavior).
Implement a check for CAP_NET_ADMIN in swconfig_set_attr() and deny any
requests originating from user contexts lacking this capability.
Reported-by: Elliott Mitchell <ehem+openwrt@m5p.com>
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Jo-Philipp Wich [Fri, 10 Jun 2016 22:51:22 +0000 (00:51 +0200)]
swconfig: improve failure reporting
Report the translated error to the user if a get/set netlink operation failed.
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Kevin Darbyshire-Bryant [Mon, 31 Aug 2015 17:11:41 +0000 (18:11 +0100)]
dnsmasq: support hostid ipv6 address suffix option
Add support for hostid dhcp config entry to dnsmasq. This allows
specification of dhcpv6 hostid suffix and works in the same way as
odhcpd.
Entries in auto generated dnsmasq.conf should conform to:
dhcp-host=mm:mm:mm:mm:mm:mm,IPv4addr,[::V6su:ffix],hostname
example based on sample config/dhcp entry:
config host
option name 'Kermit'
option mac 'E0:3F:49:A1:D4:AA'
option ip '192.168.235.4'
option hostid '4'
dhcp-host=E0:3F:49:A1:D4:AA,192.168.235.4,[::0:4],Kermit
Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
Scott Shambarger [Fri, 10 Jun 2016 12:50:35 +0000 (14:50 +0200)]
mac80211: fix calculation of VHT capability values
- Fix calculation of `$vht_cap` bit field
- Replace wrong reference to `$tx_stbc` variable with proper `$tx_stbc_2by1` one
- Emit proper `RX-STBC-{1,12,123,1234}` tokens for the VHT capability list
See https://dev.openwrt.org/ticket/22535 for reference.
Signed-off-by: Scott Shambarger <devel@shambarger.net>
Hans Dedecker [Wed, 8 Jun 2016 14:39:04 +0000 (16:39 +0200)]
busybox: Call ntpd hotplug script for every action
Daemons that are waiting for a timesync are only triggered when the action is stratum.
As step is the first sync action pass all actions to the ntpd hotplug scripts; it's up
to the ntpd hotplugscript to filter out the actions it is interested in.
Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
Hans Dedecker [Wed, 8 Jun 2016 14:35:18 +0000 (16:35 +0200)]
dnsmasq: Add option --max-port
By default dnsmasq uses random ports for outbound dns queries;
when the maxport UCI option is specified the ports used will
always be smaller than the specified value.
This is usefull for systems behind firewalls.
Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
Rafał Miłecki [Fri, 10 Jun 2016 10:53:11 +0000 (12:53 +0200)]
bcm53xx: calculate TRX CRC32 using whole kernel partition
This provides better protection of flash data.
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
Felix Fietkau [Fri, 10 Jun 2016 08:47:34 +0000 (10:47 +0200)]
mvebu: add a patch to deal with excessive latencies/delays during flash PIO command processing
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Thu, 9 Jun 2016 09:09:56 +0000 (11:09 +0200)]
xtables-addons: add missing dependency
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Hannu Nyman [Wed, 8 Jun 2016 13:12:55 +0000 (16:12 +0300)]
ubox: increase default size of system log buffer to 64 kB
Increase the default system log buffer size
from 16 kB (default both in logd source and in the startup script)
to 64 kB by adjusting the default value in startup script.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
Hannu Nyman [Wed, 8 Jun 2016 13:03:20 +0000 (16:03 +0300)]
base-files: increase default system log size to 64 kB
Increase the default system log buffer size
from 16 kB (built-in default in ubox logd)
to 64 kB by setting the option in /etc/config/system.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
Álvaro Fernández Rojas [Wed, 8 Jun 2016 22:14:26 +0000 (00:14 +0200)]
brcm2708: fix another missing kmod dependency
kmod-sound-soc-digidac1-soundcard is also missing snd-soc-wm8804 dependency
for snd-soc-wm8804-i2c
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
Álvaro Fernández Rojas [Wed, 8 Jun 2016 22:06:20 +0000 (00:06 +0200)]
brcm2708: fix missing dependency found by buildbot
Add missing dependency to kmod-sound-soc-adau1977-adc.
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>