Re: [LEDE-DEV] [PATCH] libjson-c: Update to 0.13

2018-03-30 Thread Hans Dedecker
On Sat, Mar 31, 2018 at 12:25 AM, Rosen Penev wrote: > From: Daniel Engberg > > Update (lib)json-c to 0.13 What are the changes? Is there any size increase ? Please be a bit more verbose in the git commit description Hans > > Signed-off-by: Daniel Engberg > Signed-off-by: Rosen Penev > --- >

[LEDE-DEV] [PATCH] build: log time taken by each packages/steps

2018-03-30 Thread Etienne Champetier
The idea is to easily get the list of packages taking the most time to build, and see if we can improve them Use SetupHostCommand as recommended by John Signed-off-by: Etienne Champetier --- include/prereq-build.mk | 5 + include/subdir.mk | 1 + 2 files changed, 6 insertions(+) diff

[LEDE-DEV] [PATCH] libjson-c: Update to 0.13

2018-03-30 Thread Rosen Penev
From: Daniel Engberg Update (lib)json-c to 0.13 Signed-off-by: Daniel Engberg Signed-off-by: Rosen Penev --- package/libs/libjson-c/Makefile | 4 +-- package/libs/libjson-c/patches/000-libm.patch | 50 --- 2 files changed, 2 insertions(+), 52 deletions(-

[LEDE-DEV] [PATCH] package/utils/f2fs-tools: Update to 1.10.0

2018-03-30 Thread Rosen Penev
From: Daniel Engberg Update f2fs-tools to 1.10.0 Signed-off-by: Daniel Engberg Signed-off-by: Rosen Penev --- package/utils/f2fs-tools/Makefile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/package/utils/f2fs-tools/Makefile b/package/utils/f2fs-tools/Makefile index

[LEDE-DEV] [PATCH] mvebu: Switch Turris Omnia to use ath10k-ct driver and firmware.

2018-03-30 Thread Rosen Penev
My testing has shown both ath10k and firmware to be unstable. Here is a summary of results done over two weeks: ath10k + QCA firmware = driver crash, WiFi dies completely. ath10k + CT firmware = driver crash. WiFi dies completely. ath10k-ct + QCA firmware = firmware crash. WiFi does not die*. ath

[LEDE-DEV] [PATCH 2/3] sysctl: Restrict kernel pointer access from normal users.

2018-03-30 Thread Rosen Penev
The only downside to this is that it breaks perf with non-root users. I don't think this is an issue in OpenWrt. Signed-off-by: Rosen Penev --- package/base-files/files/etc/sysctl.conf | 3 +++ 1 file changed, 3 insertions(+) diff --git a/package/base-files/files/etc/sysctl.conf b/package/bas

[LEDE-DEV] [PATCH 3/3] sysctl: Protect hard/symlinks by default.

2018-03-30 Thread Rosen Penev
There is no usecase for not protecting symlinks that I know of in OpenWrt. Not even on desktop systems where you have multiple users with a shell. Signed-off-by: Rosen Penev --- package/base-files/files/etc/sysctl.conf | 4 1 file changed, 4 insertions(+) diff --git a/package/base-files/f

[LEDE-DEV] [PATCH 1/3] kernel: Restrict dmesg output to root.

2018-03-30 Thread Rosen Penev
In typical OpenWrt setups, there are no other users that have a shell spawned for them by default. This can be overriden by the kernel.dmesg_output syssctl. Signed-off-by: Rosen Penev --- target/linux/generic/config-3.18 | 2 +- target/linux/generic/config-4.14 | 2 +- target/linux/generic/con

[LEDE-DEV] [PATCH 2/2] ustream-ssl: Disable RC4 for TLS connections.

2018-03-30 Thread Rosen Penev
When used with LuCI, SSLlabs complains that RC4 is insecure and thus caps the score to a B. I believe RC4 is compile-time enabled for non-TLS related reasons. Signed-off-by: Rosen Penev --- ustream-openssl.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ustream-openssl.c

[LEDE-DEV] [PATCH 1/2] ustream-ssl: Enable ECDHE with OpenSSL and prefer it to the other suites.

2018-03-30 Thread Rosen Penev
When used with LuCI, SSLlabs complains that Forward Secrecy is not enabled and thus caps the score to a B. Signed-off-by: Rosen Penev --- ustream-openssl.c | 4 1 file changed, 4 insertions(+) diff --git a/ustream-openssl.c b/ustream-openssl.c index 83f6140..0f51b9d 100644 --- a/ustream-o

Re: [LEDE-DEV] [PATCH] ath10k-ct: Update firmware to latest.

2018-03-30 Thread Rosen Penev
On Mon, Mar 26, 2018 at 3:28 PM, wrote: > From: Ben Greear > > Wave-1 firmware has a fix for 'addba' not finding the peer. Thanks to Hauke > for finding and reporting this. > > Wave-2 firmware has a fix for leaking a peer multicast key when a monitor > device > is created. > > And I re-ordered

[LEDE-DEV] [PATCH] kernel: update kernel 4.9 to version 4.9.91

2018-03-30 Thread Hauke Mehrtens
* Refreshed patches. * Deleted 210-Revert-led-core-Fix-brightness-setting-when-setting-.patch (was accepted upstream) * Deleted 812-pci-dwc-fix-enumeration.patch (was accepted upstream) Compile and run tested on lantiq Signed-off-by: Hauke Mehrtens --- include/kernel-version.mk

[LEDE-DEV] [PATCH] Revert "iproute2: fix hidden uint to uin64_t promotion in json_print"

2018-03-30 Thread Kevin Darbyshire-Bryant via Lede-dev
The sender domain has a DMARC Reject/Quarantine policy which disallows sending mailing list messages using the original "From" header. To mitigate this problem, the original message has been wrapped automatically by the mailing list software.--- Begin Message --- This reverts commit 745d0e7f4b6e86

[LEDE-DEV] [PATCH] download: skip hash check without a download hash

2018-03-30 Thread Hauke Mehrtens
If the package doe not contain a PKG_HASH just skip the check instead of making the download fail. The scripts/download.pl script will automatically skip the hash check in case the hash value equals skip, otherwise it fails. Signed-off-by: Hauke Mehrtens --- include/download.mk | 4 ++-- 1 file

[LEDE-DEV] [PATCH] libnl: Disbale debug support

2018-03-30 Thread Hauke Mehrtens
This dereses the size of the libnl pakcage a little bit old: 857 bin/packages/mips_24kc/base/libnl_3.4.0-1_mips_24kc.ipk 41195 bin/packages/mips_24kc/base/libnl-core_3.4.0-1_mips_24kc.ipk 7818 bin/packages/mips_24kc/base/libnl-genl_3.4.0-1_mips_24kc.ipk 24322 bin/packages/mips_24kc/base/libn

[LEDE-DEV] [PATCH] mbedtls: update to version 2.8.0

2018-03-30 Thread Hauke Mehrtens
This fixes some minor security problems. Signed-off-by: Hauke Mehrtens --- package/libs/mbedtls/Makefile | 4 +-- package/libs/mbedtls/patches/200-config.patch | 36 +-- 2 files changed, 20 insertions(+), 20 deletions(-) diff --git a/package/libs/mbedtls

[LEDE-DEV] [PATCH 2/2] mtd-utils: activate --gc-sections

2018-03-30 Thread Hauke Mehrtens
This reduces the size of the binary a bit: old: 37556 bin/targets/lantiq/xrx200/packages/nand-utils_2.0.1-1_mips_24kc.ipk 81697 bin/targets/lantiq/xrx200/packages/ubi-utils_2.0.1-1_mips_24kc.ipk new: 27450 bin/targets/lantiq/xrx200/packages/nand-utils_2.0.1-1_mips_24kc.ipk 71796 bin/targets/l

[LEDE-DEV] [PATCH 1/2] mtd-utils: Mark some lzma functions as static

2018-03-30 Thread Hauke Mehrtens
These functions are not declared in any header file and only used in same compile unit, mark them as static to remove one gcc warning and make it easier for the compiler to optimize them out. Signed-off-by: Hauke Mehrtens --- .../utils/mtd-utils/patches/130-lzma_jffs2.patch | 38 +++---

[LEDE-DEV] [PATCH] mvebu: Add support for WRT3200ACM with new NAND flash

2018-03-30 Thread Hauke Mehrtens
From: Imre Kaloz Newer Linksys boards might come with a Winbond W29N02GV which can be configured in different ways. Make sure we configure it the same way as the older chips so everything keeps working. Signed-off-by: Imre Kaloz --- .../arch/arm/boot/dts/armada-385-linksys-rango.dts | 2

Re: [LEDE-DEV] [PATCH] leds-apu2: add newer board names

2018-03-30 Thread Hauke Mehrtens
On 03/29/2018 09:55 PM, Sebastian Fleer wrote: > After building coreboot myself, I discovered that the board names > changed again - they now seem to be the same as before. > https://github.com/pcengines/coreboot/commit/3578e9fb6dac753ec9365c88a8556ca1b90a8deb > > > I guess the "PC Engines apuX"

Re: [LEDE-DEV] mac80211: update request

2018-03-30 Thread Hauke Mehrtens
On 03/29/2018 07:11 PM, Evgeniy Didin wrote: > Hello, > > Trying to add support of drivers/net/wireless/rsi/rsi91x driver in mac80211 > we faced with problem, > that the version of backports is quite old(2017-11-01), and at least one > significant commit for rsi91x was later than this version: >

Re: [LEDE-DEV] [PATCH] treewide: set scripts executable

2018-03-30 Thread Yousong Zhou
On 30 March 2018 at 17:53, Koen Vandeputte wrote: > A lot of scripts are not set executable and thus will not run on invocation. > Fix this by setting appropriate rights. > > Currently, only files with extension .sh are targetted. > > A partial list of files on my imx6 after installing the latest

[LEDE-DEV] [PATCH] treewide: set scripts executable

2018-03-30 Thread Koen Vandeputte
A lot of scripts are not set executable and thus will not run on invocation. Fix this by setting appropriate rights. Currently, only files with extension .sh are targetted. A partial list of files on my imx6 after installing the latest master: File '/etc/diag.sh' is not executable: -rw-r--r-- F

Re: [LEDE-DEV] Question regarding kmod-ipt-offload and imagebuilder

2018-03-30 Thread Koen Vandeputte
On 2018-03-29 16:14, Felix Fietkau wrote: On 2018-03-29 13:42, Koen Vandeputte wrote: Hi Felix, Regarding your commit ("build: include kmod-ipt-offload in default images") [1] By default, this package is only supported (and selectable) when the target device uses kernel 4.14. I've just tri