[LEDE-DEV] [PATCH v2] dropbear: bump to 2017.75

2017-05-20 Thread Kevin Darbyshire-Bryant
- Security: Fix double-free in server TCP listener cleanup A double-free in the server could be triggered by an authenticated user if dropbear is running with -a (Allow connections to forwarded ports from any host) This could potentially allow arbitrary code execution as root by an authenticated us

Re: [LEDE-DEV] [PATCH v2] dropbear: bump to 2017.75

2017-05-20 Thread Bjørn Mork
Kevin Darbyshire-Bryant writes: > CVE-2018-9078 https://secure.ucc.asn.au/hg/dropbear/rev/c8114a48837c 2018? Early fix, I guess :-) Bjørn ___ Lede-dev mailing list Lede-dev@lists.infradead.org http://lists.infradead.org/mailman/listinfo/lede-dev

[LEDE-DEV] [PATCH v3] dropbear: bump to 2017.75

2017-05-20 Thread Kevin Darbyshire-Bryant
- Security: Fix double-free in server TCP listener cleanup A double-free in the server could be triggered by an authenticated user if dropbear is running with -a (Allow connections to forwarded ports from any host) This could potentially allow arbitrary code execution as root by an authenticated us

Re: [LEDE-DEV] [RFC] Pre-seeded files/directories for UBIFS

2017-05-20 Thread Florian Fainelli
Hello, On 05/20/2017 09:12 AM, Richard Weinberger wrote: > Hi! > > These days I had an interesting discussion with Christoph about overlayfs and > its burden. The main use-case of overlayfs in combination with UBIFS is > having a > squashfs as lower and UBIFS as upper directory. Such that all ch

Re: [LEDE-DEV] [RFC] Pre-seeded files/directories for UBIFS

2017-05-20 Thread Richard Weinberger
Florian, Am 20.05.2017 um 20:39 schrieb Florian Fainelli: > Hello, > > On 05/20/2017 09:12 AM, Richard Weinberger wrote: >> Hi! >> >> These days I had an interesting discussion with Christoph about overlayfs and >> its burden. The main use-case of overlayfs in combination with UBIFS is >> having

Re: [LEDE-DEV] [PATCH] dnsmasq: write resolv.conf also when noresolv = 1

2017-05-20 Thread Hans Dedecker
On Sat, May 20, 2017 at 12:41 AM, Paul Oranje wrote: > When UCI dhcp.dnsmasq.noresolv is true, dnsmasq ignores the (wan) resolv.conf > for upstream name resolution and the dnsmasq init script ialso skips writing > /tmp/resolv.conf (/etc/resolv.conf soft links that file). > > Not using the local ru

Re: [LEDE-DEV] [OpenWrt-Devel] [RFC] Pre-seeded files/directories for UBIFS

2017-05-20 Thread Ralph Sennhauser
On Sat, 20 May 2017 11:39:33 -0700 Florian Fainelli wrote: > Hello, > > On 05/20/2017 09:12 AM, Richard Weinberger wrote: > > Hi! > > > > These days I had an interesting discussion with Christoph about > > overlayfs and its burden. The main use-case of overlayfs in > > combination with UBIFS is

Re: [LEDE-DEV] [OpenWrt-Devel] [RFC] Pre-seeded files/directories for UBIFS

2017-05-20 Thread Richard Weinberger
Ralph, Am 20.05.2017 um 21:36 schrieb Ralph Sennhauser: >>> These days I had an interesting discussion with Christoph about >>> overlayfs and its burden. The main use-case of overlayfs in >>> combination with UBIFS is having a squashfs as lower and UBIFS as >>> upper directory. Such that all chang

Re: [LEDE-DEV] [OpenWrt-Devel] [RFC] Pre-seeded files/directories for UBIFS

2017-05-20 Thread Ralph Sennhauser
Hi Richard, On Sat, 20 May 2017 21:57:36 +0200 Richard Weinberger wrote: > Ralph, > > Am 20.05.2017 um 21:36 schrieb Ralph Sennhauser: > >>> These days I had an interesting discussion with Christoph about > >>> overlayfs and its burden. The main use-case of overlayfs in > >>> combination with U

[LEDE-DEV] [PATCH] make_ext4: Add strict prototypes.

2017-05-20 Thread Rosen Penev
Removes some undefined behavior. Signed-off by: Rosen Penev --- allocate.h| 10 +- contents.c| 8 contents.h| 2 +- extent.h | 2 +- indirect.h| 2 +- make_ext4fs.c | 12 ++-- 6 files changed, 18 insertions(+), 18 deletions(-) diff --git a/alloc

[LEDE-DEV] [PATCH] samba: Remove a few redundant options from the default config.

2017-05-20 Thread Rosen Penev
The master settings seem to be compatibility settings for Windows 98 and below. guest ok conflicts with the current UCI setup where it gets applied to directories as well. Unfortunately, the global setting takes precedence and nullifies the local ones. encrypt passwords defaults to yes. No reason t

[LEDE-DEV] [PATCH] samba: remove browse/write able entries

2017-05-20 Thread Rosen Penev
current LuCI defaults set the former for each individual share. Patch is pending for the latter. Signed-off by: Rosen Penev --- package/network/services/samba36/files/smb.conf.template | 2 -- 1 file changed, 2 deletions(-) diff --git a/package/network/services/samba36/files/smb.conf.template