Add CONFIG_IEEE80211W variable to DRIVER_MAKEOPTS so that 802.11w
support is properly compiled in full variant.
This fixes #20179
Signed-off-by: Janusz Dziemidowicz
---
package/network/services/hostapd/Makefile | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/package/network/
Hi,
On Wed, Aug 26, 2015 at 7:09 AM, Martin Tesař wrote:
> Hi,
>
> here is an updated patch.
Please send the patch inline like you did the first time (easier to
review and comment on), and:
diff --git a/target/linux/brcm63xx/patches-3.18/999-board_VR-3026e.patch
b/target/linux/brcm63xx/patches-
On 26/08/2015 01:00, Etienne CHAMPETIER wrote:
> This patch series rework a bit ujail,
> and add capabilities support to it
nice
>
> Seccomp filter are very powerful but not totally generic,
> each arch can have different set of syscalls,
> each libc can use different syscall for the same func
similiar to import from uci cli.
import removes all old configs and import the new config.
example:
ubus call uci import \
'{"config": "dhcp", "values": { "srv": { ".type": "host", ".name": "srv",
"mac": "00:11:22:33:44:55", "ip": "192.168.1.2" } } }'
---
uci.c | 152 ++
Sorry I forgot an rpcd prefix in the subject. This is a patch for rpcd.
___
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
2015-08-26 15:48 GMT+02:00 John Crispin :
>
>
> On 26/08/2015 01:00, Etienne CHAMPETIER wrote:
> > This patch series rework a bit ujail,
> > and add capabilities support to it
>
> nice
>
> >
> > Seccomp filter are very powerful but not totally generic,
> > each arch can have different set of sysca
Here is the third version. I hope it will be fine, finally.
Regards,
Martin
___
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Add support for Comtrend VR-3026e v1.
The device is almost identical to the Comtrend VR-3025un.
Signed-off-by: Martin Tesar
---
target/linux/brcm63xx/base-files/etc/diag.sh | 3 +
.../base-files/etc/uci-defaults/02_network | 3 +-
.../base-files/etc/uci-defaults/09_fix_crc
uClibc-ng is a spin-off of original uClibc, see http://www.uclibc-ng.org/
We try to regularly add changes from uClibc to uClibc-ng.
We even sent patches and bug reports to the uClibc mailing list.
The config file is compatible between uClibc-ng 1.0 and uClibc git master.
This might change in the f
Hi,
On 26/08/2015 20:11, Alexey Brodkin wrote:
> uClibc-ng is a spin-off of original uClibc, see http://www.uclibc-ng.org/
>
> We try to regularly add changes from uClibc to uClibc-ng.
> We even sent patches and bug reports to the uClibc mailing list.
> The config file is compatible between uClib
Hi John,
On Wed, 2015-08-26 at 20:20 +0200, John Crispin wrote:
> Hi,
>
> On 26/08/2015 20:11, Alexey Brodkin wrote:
> > uClibc-ng is a spin-off of original uClibc, see http://www.uclibc-ng.org/
> >
> > We try to regularly add changes from uClibc to uClibc-ng.
> > We even sent patches and bug re
First, I promise this is the last reminder of the OpenWrt Summit Session
deadline. :)
I just wanted to remind folks that the deadline for submitting OpenWrt
Summit sessions is this Friday, August 28. We have some great session
submissions but we're still looking for YOUR session submission. If you
v3 of my (u)jail work, you can now use separately
namespaces jail, capabilities and seccomp
Openwrt procd Makefile patch v2 is still ok
___
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/open
we can now build preload-seccomp, ujail, utrace separately
Signed-off-by: Etienne CHAMPETIER
---
CMakeLists.txt | 2 ++
1 file changed, 2 insertions(+)
diff --git a/CMakeLists.txt b/CMakeLists.txt
index 6af17a3..805e2ed 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -84,7 +84,9 @@ TARGET_L
-use EXIT_SUCCESS/EXIT_FAILURE (not -1)
-parse every option in main, put them in opts struct
-add CLONE_NEWIPC to the clone() call (it's already compiled in openwrt kernel)
-return the exit status of the jailed process, or the num of the signal that
killed it
-add missing options to usage()
-add a
(perload-jail -> preload-seccomp)
Signed-off-by: Etienne CHAMPETIER
---
jail/seccomp.h | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/jail/seccomp.h b/jail/seccomp.h
index 6c585ad..c44a607 100644
--- a/jail/seccomp.h
+++ b/jail/seccomp.h
@@ -12,8 +12,8 @@
*/
#define
prctl(PR_SET_NO_NEW_PRIVS, 1) is enough, we don't require CAP_SYS_ADMIN
see
https://www.kernel.org/doc/Documentation/prctl/seccomp_filter.txt
https://www.kernel.org/doc/Documentation/prctl/no_new_privs.txt
Signed-off-by: Etienne CHAMPETIER
---
jail/preload.c | 6 --
1 file changed, 6 deletio
Signed-off-by: Etienne CHAMPETIER
---
jail/elf.c | 14 --
jail/jail.c | 10 --
jail/log.h | 1 +
3 files changed, 1 insertion(+), 24 deletions(-)
diff --git a/jail/elf.c b/jail/elf.c
index c198599..cbb3051 100644
--- a/jail/elf.c
+++ b/jail/elf.c
@@ -12,33 +12,19 @@
*/
If there is one or more capabilities in cap.keep,
drop all capabilities not in cap.keep.
Always drop all capabalities in cap.drop
exemple json syntax:
{
"cap.keep": [
"cap_net_raw"
],
"cap.drop": []
}
Signed-off-by: Etienne CHAMPETIER
---
CMakeLists.txt | 18 +---
jail/capa
building a generic jail can be hard,
choosing to drop some capabilities can be easier.
This commit permit to use namespaces, capabilities
and seccomp combined as you like.
Signed-off-by: Etienne CHAMPETIER
---
jail/jail.c | 76 +
1 fil
Hi all,
I was wondering why OpenWRT switched to musl -- is it purely because
uclibc hasn't actually maintained their code properly?
One of the things I have noticed since the CC trunk builds I did with
kernel 3.18.11 + uclibc is that the image sizes have ballooned out by a
fair bit.
For ex
- it causes issues with qemu versions < 2.2
should fix issues with Ubuntu 14.03 LTS (qemu 2.0)
errors are:
Kernel panic - not syncing: Attempted to kill init! exitcode=0x0004
see ticket #16881
Signed-off-by: Dirk Neukirchen
---
target/linux/malta/be/target.mk | 2 +-
target/linux/malta/le/t
22 matches
Mail list logo
