Re: [LEDE-DEV] RFC [PATCH] odhcpd: don't enable server mode on dhcp lan

2017-09-01 Thread Hans Dedecker
On Thu, Aug 31, 2017 at 11:35 PM, Karl Palsson wrote: > > Daniel Golle wrote: >> Hi Karl, >> >> On Thu, Aug 31, 2017 at 05:17:38PM +, Karl Palsson wrote: >> > Instead of blindly enabling the odhcpd v6 server and RA server on the >> > lan port, only do that if the lan port isn't set to DHCP. >

[LEDE-DEV] [PATCHv2] odhcpd: don't enable server mode on non-static lan port

2017-09-01 Thread Karl Palsson
Instead of blindly enabling the odhcpd v6 server and RA server on the lan port, only do that if the lan port protocol is "static" This prevents the unhelpful case of a device being a dhcpv4 client and v6 server on the same ethernet port. Signed-off-by: Karl Palsson --- Changes since v1 * use /et

[LEDE-DEV] [PATCH] kernel: refresh 4.4 phy drivers patch

2017-09-01 Thread Kevin Darbyshire-Bryant
Tidy up fuzz in 002-phy_drivers_backport.patch due to recent commits to out of tree phy drivers implementing get_port_stats() Phy driver commits: 0369e35, 3056d09, 4ddbc43, 4d8a66d Signed-off-by: Kevin Darbyshire-Bryant --- .../pending-4.4/002-phy_drivers_backport.patch | 34 +++

[LEDE-DEV] [PATCH] mbedtls: update to 2.6.0 CVE-2017-14032

2017-09-01 Thread Kevin Darbyshire-Bryant
Fixed an authentication bypass issue in SSL/TLS. When the TLS authentication mode was set to 'optional', mbedtls_ssl_get_verify_result() would incorrectly return 0 when the peer's X.509 certificate chain had more than MBEDTLS_X509_MAX_INTERMEDIATE_CA intermediates (default: 8), even when it was not

Re: [LEDE-DEV] RFC [PATCH] odhcpd: don't enable server mode on dhcp lan

2017-09-01 Thread Eric Luehrsen
On Thu, Aug 31, 2017 at 11:35 PM, Karl Palsson wrote: > > > > Daniel Golle wrote: > >> Hi Karl, > >> > >> On Thu, Aug 31, 2017 at 05:17:38PM +, Karl Palsson wrote: > >> > Instead of blindly enabling the odhcpd v6 server and RA server on the > >> > lan port, only do that if the lan port isn't

[LEDE-DEV] [PATCH] dropbear: Link ssh and scp command to /bin instead of /usr/bin

2017-09-01 Thread Rosen Penev
ssh and scp commands interfere with OpenSSH when installed in /usr/bin . One use case is when installing dropbear to get root access when only OpenSSH is available (OpenSSH disallows root password logins). Once dropbear installs, it replaces OpenSSH's executables, even when removed with opkg. Op

Re: [LEDE-DEV] [PATCH] dropbear: Link ssh and scp command to /bin instead of /usr/bin

2017-09-01 Thread Baptiste Jonglez
On 01-09-17, Rosen Penev wrote: > ssh and scp commands interfere with OpenSSH when installed in /usr/bin . > > One use case is when installing dropbear to get root access when only OpenSSH > is available (OpenSSH disallows root password logins). Once dropbear > installs, it replaces OpenSSH's ex