Re: [LEDE-DEV] [PATCH] treewide: set scripts executable

2018-03-31 Thread Michael Heimpold
Am Freitag, 30. März 2018, 18:03:19 CEST schrieb Yousong Zhou: > On 30 March 2018 at 17:53, Koen Vandeputte > wrote: > > A lot of scripts are not set executable and thus will not run on invocation. > > Fix this by setting appropriate rights. > > > > Currently, only files with extension .sh are ta

Re: [LEDE-DEV] [PATCH] leds-apu2: add newer board names

2018-03-31 Thread Sebastian Fleer
On 30.03.2018 16:02, Hauke Mehrtens wrote: Is the coreboot version with the new board names used widely or can we ignore that and drop your patch? Hauke I had a conversation with R1D2 in the forum. We both can't state any numbers, but it seems that some users needed to upgrade to the coreboot

Re: [LEDE-DEV] [PATCH] libjson-c: Update to 0.13

2018-03-31 Thread Alexandru Ardelean
On Sat, Mar 31, 2018 at 9:45 AM, Hans Dedecker wrote: > On Sat, Mar 31, 2018 at 12:25 AM, Rosen Penev wrote: >> From: Daniel Engberg >> >> Update (lib)json-c to 0.13 > What are the changes? > Is there any size increase ? > Please be a bit more verbose in the git commit description > >From me, t

Re: [LEDE-DEV] DNS split horizon *without* dnsmasq

2018-03-31 Thread Eric Luehrsen
On 03/25/2018 03:27 AM, Philip Prindeville wrote: Thinking Bind, probably. On Mar 23, 2018, at 5:38 PM, Eric Luehrsen wrote: What do you want to serve your dns then? Unbound or Bind? - Eric On Fri, Mar 23, 2018, 1:31 PM Philip Prindeville wrote: Hi all, As the ISC-DHCP maintainer, I ne

Re: [LEDE-DEV] DNS split horizon *without* dnsmasq

2018-03-31 Thread Philip Prindeville
> On Mar 31, 2018, at 9:03 AM, Eric Luehrsen wrote: > > On 03/25/2018 03:27 AM, Philip Prindeville wrote: >> Thinking Bind, probably. >> >> >> >>> On Mar 23, 2018, at 5:38 PM, Eric Luehrsen wrote: >>> >>> What do you want to serve your dns then? Unbound or Bind? >>> >>> - Eric >>> >>> On

Re: [LEDE-DEV] DNS split horizon *without* dnsmasq

2018-03-31 Thread Eric Luehrsen
It seems I have static-stub wrong for its purpose. dhcpd and bind do work together. To accomplish this, the bind instance needs to be master for the domain zone and ptr zone where DHCP records will be entered. This master zone needs to permit remote updates, preferably with a secure key. dhcpd

[LEDE-DEV] [PATCH] build: Improve GCC version detection

2018-03-31 Thread Hauke Mehrtens
This now makes sure that the beginning of the version number gets checked and "4.4.5" will not match was a supported version. GCC 8 and GCC 9 are now marked as supported, but we probably have to fix some problems for them. Closes: FS#1433 Signed-off-by: Hauke Mehrtens --- include/prereq-build.mk

Re: [LEDE-DEV] DNS split horizon *without* dnsmasq

2018-03-31 Thread Philip Prindeville
> On Mar 31, 2018, at 12:57 PM, Eric Luehrsen wrote: > > It seems I have static-stub wrong for its purpose. dhcpd and bind do work > together. To accomplish this, the bind instance needs to be master for the > domain zone and ptr zone where DHCP records will be entered. This master zone > ne

Re: [LEDE-DEV] [PATCH 2/3] sysctl: Restrict kernel pointer access from normal users.

2018-03-31 Thread Felix Fietkau
On 2018-03-30 15:18, Rosen Penev wrote: > The only downside to this is that it breaks perf with non-root users. I don't > think this is an issue in OpenWrt. > > Signed-off-by: Rosen Penev > --- > package/base-files/files/etc/sysctl.conf | 3 +++ > 1 file changed, 3 insertions(+) > > diff --git

Re: [LEDE-DEV] [PATCH 2/3] sysctl: Restrict kernel pointer access from normal users.

2018-03-31 Thread Rosen Penev
On Sat, Mar 31, 2018 at 5:18 PM, Felix Fietkau wrote: > On 2018-03-30 15:18, Rosen Penev wrote: >> The only downside to this is that it breaks perf with non-root users. I >> don't think this is an issue in OpenWrt. >> >> Signed-off-by: Rosen Penev >> --- >> package/base-files/files/etc/sysctl.c

[LEDE-DEV] [PATCH 2/2] ustream-ssl: Remove RC4 from ciphersuite in server mode.

2018-03-31 Thread Rosen Penev
SSLlabs complains that RC4 is enabled as it is insecure, thereby capping the grade to B. Signed-off-by: Rosen Penev --- ustream-openssl.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/ustream-openssl.c b/ustream-openssl.c index 2faa855..eb03dab 100644 --- a/ustream-openssl.c +++ b/ustre

[LEDE-DEV] [PATCH 1/2] ustream-ssl: Enable ECDHE with OpenSSL.

2018-03-31 Thread Rosen Penev
When used with LuCI, SSLlabs complains that Forward Secrecy is not enabled and thus caps the score to a B. Signed-off-by: Rosen Penev --- ustream-openssl.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/ustream-openssl.c b/ustream-openssl.c index 83f6140..2faa855 100644 --- a/ustream-op