Re: [LEDE-DEV] [PATCH][RFC] procd: service: add data within the service itself

2017-10-18 Thread John Crispin
Hi Pierre sorry for the late reply, comments inline On 04/10/17 12:50, pme.leb...@gmail.com wrote: From: Pierre Lebleu It gives the ability to create firewall data within the service itself rather than within an instance. Signed-off-by: Pierre Lebleu --- service/service.c | 45 ++

Re: [LEDE-DEV] [Feature Request]Discussion - Move everything to Namespaces?

2017-10-18 Thread Amir Sabbaghi
+1 from me. I am creating namespaces with a script and would like to see this feature in UCI. On Tue, Oct 17, 2017 at 5:33 PM Joel Wirāmu Pauling wrote: > > Hi there; > > As a long time Openwrt -nee Lede user and sometimes bug reporter; I've been > maintaining my own forks and builds for several

Re: [LEDE-DEV] KRACK (Key Reinstallation Attacks), now patched upstream in hostapd

2017-10-18 Thread Jo-Philipp Wich
Hi, > Why would that be? I don't see what the negative effects are if I update > just the hostapd and wpad* packages, other than using up some space, > instead of installing a new image with them included. Or am I missing > something? I think Stijn was referring to the idea of (silently) updating

[LEDE-DEV] [PATCH] kernel: bump 4.9 to 4.9.57

2017-10-18 Thread Kevin Darbyshire-Bryant
Refresh patches. Upstream CVEs: CVE-2017-7518 CVE-2017-0786 CVE-2017-1000255 CVE-2017-12188 CVE-2017-15265 Compile tested for: ar71xx Run tested on: ar71xx Archer C7 v2 Signed-off-by: Kevin Darbyshire-Bryant --- include/kernel-version.mk | 4 +- ...d-firmware-loader

Re: [LEDE-DEV] Serial data getting lost - bug or a feature?

2017-10-18 Thread Valent Turkovic
I have just finished testing with Lede 17.01.3 but I couldn't use default image but I build new one via Imagebuilder because we have quite a few additional packages and we use wpad instead of wpad-mini. These are the packages I added to image: blkid block-mount kmod-fs-ext4 kmod-fs-vfat kmod-nls-

Re: [LEDE-DEV] KRACK (Key Reinstallation Attacks), now patched upstream in hostapd

2017-10-18 Thread Aaron Z
On Tue, Oct 17, 2017 at 10:28 PM, Stijn Tintel wrote: > On 18-10-17 01:40, Aaron Z wrote: >> On Tue, Oct 17, 2017 at 3:24 AM, Felix Fietkau wrote: >>> On 2017-10-17 01:53, Jim Gettys wrote: Will this require a upgrade of the base image, or can we just upgrade packages? If so, whic

Re: [LEDE-DEV] KRACK (Key Reinstallation Attacks), now patched upstream in hostapd

2017-10-18 Thread Stijn Tintel
On 18-10-17 14:20, Aaron Z wrote: > On Tue, Oct 17, 2017 at 10:28 PM, Stijn Tintel wrote: >> On 18-10-17 01:40, Aaron Z wrote: >>> On Tue, Oct 17, 2017 at 3:24 AM, Felix Fietkau wrote: On 2017-10-17 01:53, Jim Gettys wrote: > Will this require a upgrade of the base image, or can we just

Re: [LEDE-DEV] [PATCH] kernel: bump 4.9 to 4.9.57

2017-10-18 Thread Koen Vandeputte
Tested-by: Koen Vandeputte Targets: cns3xxx, imx6 ___ Lede-dev mailing list Lede-dev@lists.infradead.org http://lists.infradead.org/mailman/listinfo/lede-dev

[LEDE-DEV] [PATCH] kernel: bump 4.9 to 4.9.57

2017-10-18 Thread Kevin Darbyshire-Bryant
Refresh patches. Compile-tested for ar71xx - Archer C7 v2 Runtime-tested on ar71xx - Archer C7 v2 Fixes the following CVEs: - CVE-2017-7518 - CVE-2017-0786 - CVE-2017-1000255 - CVE-2017-12188 - CVE-2017-15265 Signed-off-by: Kevin Darbyshire-Bryant --- v2 - reword commit message - no content ch

[LEDE-DEV] [PATCH v2] kernel: bump 4.9 to 4.9.57

2017-10-18 Thread Kevin Darbyshire-Bryant
Refresh patches. Compile-tested for ar71xx - Archer C7 v2 Runtime-tested on ar71xx - Archer C7 v2 Fixes the following CVEs: - CVE-2017-7518 - CVE-2017-0786 - CVE-2017-1000255 - CVE-2017-12188 - CVE-2017-15265 Signed-off-by: Kevin Darbyshire-Bryant --- v2 - reword commit message - no content c

[LEDE-DEV] [PATCH] kernel: bump 4.4 to 4.4.93

2017-10-18 Thread Kevin Darbyshire-Bryant
No patch refresh required. Compile-tested for ar71xx - Archer C7 v2 Runtime-tested on ar71xx - Archer C7 v2 Fixes the following CVEs: - CVE-2017-15265 - CVE-2017-0786 Signed-off-by: Kevin Darbyshire-Bryant --- include/kernel-version.mk | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-

[LEDE-DEV] [PATCH v2] kernel: bump 4.4 to 4.4.93

2017-10-18 Thread Kevin Darbyshire-Bryant
No patch refresh required. Compile-tested for ar71xx - Archer C7 v2 Runtime-tested on ar71xx - Archer C7 v2 Fixes the following CVEs: - CVE-2017-15265 - CVE-2017-0786 Signed-off-by: Kevin Darbyshire-Bryant --- v2 - resend as v1 accidentally deleted from patchwork. No content change. includ

[LEDE-DEV] [PATCH] kernel: bump 4.4 to 4.4.93 for 17.01

2017-10-18 Thread Kevin Darbyshire-Bryant
Refresh patches. Compile-tested for ar71xx - Archer C7 v2 Runtime-tested on ar71xx - Archer C7 v2 Fixes the following CVEs: - CVE-2017-15265 - CVE-2017-0786 Signed-off-by: Kevin Darbyshire-Bryant --- include/kernel-version.mk | 4 ++-- .../0069-hid-

Re: [LEDE-DEV] [PATCH netifd 1/2] proto: add point-to-point IPv4 address config support (FS#1037)

2017-10-18 Thread Stijn Tintel
On 17-10-17 23:16, Hans Dedecker wrote: > Add config support support for point-to-point IPv4 addresses by providing > the uci parameter ptpaddr. This allows to support a gateway being in a > different subnet than the assigned IP by modeling the local IP having a > point-to-point address. > This is

[LEDE-DEV] LEDE v17.01.4 service release

2017-10-18 Thread Stijn Tintel
The LEDE Community is proud to announce the fourth service release of stable LEDE 17.01 series. LEDE 17.01.4 “Reboot” incorporates a fair number of fixes back ported from the development branch during the last two weeks. --- Some selected highlights of the service release are:     Linux kernel u

[LEDE-DEV] meetup for beer in Prague

2017-10-18 Thread Hauke Mehrtens
Hi, We have ELCE and the OpenWrt summit next week in Prague and a lot of people will be there. I would like to have a meeting next Wednesday evening 25. October 2017 in Prague, like we did it last year at c-base: http://lists.infradead.org/pipermail/lede-dev/2016-October/003229.html I do not kno

Re: [LEDE-DEV] Need review of Perl bump to 5.26.1 (urgent)

2017-10-18 Thread Philip Prindeville
> On Oct 17, 2017, at 4:36 PM, Philip Prindeville > wrote: > > [snip] > > Since there ARE known and remedied CVE’s, I’d like to move quickly on this. > I should have qualified that. I’m going to commit 48 hours after sending out that last email unless anyone objects. -Philip __

[LEDE-DEV] [PATCH] base-files: remove bridge firewalling defaults

2017-10-18 Thread Mathias Kresin
Since Linux kernel 3.18-rc1, the settings are moved to br_netfilter. If the kmod is installed and loaded one would most like expect that {ip,ip6,arp}tables see bridged traffic. Fixes the following error messages reported in FS#1073 when running sysctl -p: sysctl: error: 'net.bridge.bridge-nf-cal

Re: [LEDE-DEV] [PATCH] base-files: remove bridge firewalling defaults

2017-10-18 Thread Felix Fietkau
On 2017-10-18 22:21, Mathias Kresin wrote: > Since Linux kernel 3.18-rc1, the settings are moved to br_netfilter. If > the kmod is installed and loaded one would most like expect that > {ip,ip6,arp}tables see bridged traffic. Unfortunately that is pulled in by kmod-ebtables. Not sure the dependency

[LEDE-DEV] [PATCH 2/4] sunxi: base files: add AP6212 (brcm43430) NVRAM

2017-10-18 Thread Luis Araneda
Used by the NanoPi M1 Plus board Signed-off-by: Luis Araneda --- .../lib/firmware/brcm/brcmfmac43430-sdio.txt | 53 ++ 1 file changed, 53 insertions(+) create mode 100644 target/linux/sunxi/base-files/lib/firmware/brcm/brcmfmac43430-sdio.txt diff --git a/target/linu

[LEDE-DEV] [PATCH 3/4] mac80211: enable brcmfmac's SDIO support on sunxi target

2017-10-18 Thread Luis Araneda
Needed to support some SDIO connected cards, like AMPAK modules Signed-off-by: Luis Araneda --- package/kernel/mac80211/Makefile | 1 + 1 file changed, 1 insertion(+) diff --git a/package/kernel/mac80211/Makefile b/package/kernel/mac80211/Makefile index 7e9b5ad618..add713a014 100644 --- a/packa

[LEDE-DEV] [PATCH 4/4] sunxi: add support for NanoPi M1 Plus board

2017-10-18 Thread Luis Araneda
Backported devicetree from Kernel 4.13 with some additions to enable Ethernet and WiFi module The following features are working: - Ethernet - WiFi - eMMC and microSD slot - USB ports The following features are not working: * Bluetooth NanoPi M1 Plus key features - SoC: Allwinner H3, Quad-core C

[LEDE-DEV] [PATCH 1/4] uboot-sunxi: add NanoPi M1 Plus board

2017-10-18 Thread Luis Araneda
Signed-off-by: Luis Araneda --- package/boot/uboot-sunxi/Makefile | 7 +++ 1 file changed, 7 insertions(+) diff --git a/package/boot/uboot-sunxi/Makefile b/package/boot/uboot-sunxi/Makefile index 50c6b06a71..849d8ba353 100644 --- a/package/boot/uboot-sunxi/Makefile +++ b/package/boot/uboot-

[LEDE-DEV] [PATCH 0/4] sunxi: add support for NanoPi M1 Plus

2017-10-18 Thread Luis Araneda
This series add support for the NanoPi M1 Plus board. Compile and tested using a real board. NanoPi M1 Plus key features - SoC: Allwinner H3, Quad-core Cortex-A7@1.2GHz - RAM: 1GB DDR3 - eMMC: 8GB - microSD slot - Ethernet 10/100/1000M - Wifi: AP6212 Luis Araneda (4): uboot-sunxi: add NanoPi M