John Crispin
491f3fc048
Support for building an hardened OpenWRT
...
Introduce configuration options to build an "hardened" OpenWRT.
Options to enable Stack-Smashing Protection, FORTIFY_SOURCE and RELRO
have been introduced.
uClibc makefile now automatically detects if SSP support is necessary.
hostapd makefile has been fixed to use "^" as sed separator since
using a comma was problematic when using "-Wl,-z,now" and the like in
TARGET_CFLAGS.
Currently enabling SSP on user space depends on enabling SSP kernel
side, this is due to the fact that TARGET_CFLAGS are used to build
kernel modules (at least). Suggestions on how to avoid this are welcome.
Using "select" instead of "depends on" doesn't seem to work with choice
entries.
Tested with a lantiq (WBMR) router, GCC 4.8, uClibc and a subset of
the available packages.
Needs to be tested with GCC 4.9 and the remaining packages.
PIE not currently included.
Signed-off-by: Alessandro Di Federico <ale+owrt@clearmind.me>
SVN-Revision: 44005
2015-01-17 14:31:30 +00:00
John Crispin
744298b8a0
base-files: Add ucidef_set_led_timer to uci-defaults.sh
...
Signed-off-by: Gerald Kerma <dreagle@doukki.net>
SVN-Revision: 44000
2015-01-17 13:58:14 +00:00
John Crispin
5010e2d2dd
modules: Add kmod-w1-slave-ds2413
...
This patch adds support for building the ds2413 one-wire kernel module.
Signed-off-by: Wouter Paesen <wouter@blue-gate.be>
SVN-Revision: 43999
2015-01-17 13:58:09 +00:00
John Crispin
09a08fb9e6
toolchain: Add libatomic when using external toolchain
...
Otherwise libatomic cannot be used in conjunction with external toolchains.
Signed-off-by: Helmut Schaa <helmut.schaa@googlemail.com>
SVN-Revision: 43998
2015-01-17 13:58:03 +00:00
John Crispin
ff3448adaa
curl: allow enabling https protocol
...
Provide optional --enable-https flag for curl.
Signed-off-by: Lars Kruse <devel@sumpfralle.de>
SVN-Revision: 43997
2015-01-17 13:57:56 +00:00
Felix Fietkau
6774c43dde
add iperf3, a new and smaller version of iperf
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 43996
2015-01-17 13:14:02 +00:00
John Crispin
748d452899
add pkgconfig information for popt library
...
Modify makefile to record pkgconfig information for the popt library.
Signed-off-by: Mike Brady <mikebrady@eircom.net>
SVN-Revision: 43994
2015-01-17 12:52:28 +00:00
Steven Barth
18f76fbef1
iproute2: add package for bridge program
...
The 'bridge' program has been part of iproute2 for a while, and it was once
declared[1] to the the intended longterm replacement for bridge-utils, but
its features are still mostly distinct[2] from the venerable brctl.
[1] http://lwn.net/Articles/435845/
[2] http://sgros-students.blogspot.com/2013/11/comparison-of-brctl-and-bridge-commands.html
Signed-off-by: Russell Senior <russell@personaltelco.net>
SVN-Revision: 43993
2015-01-17 10:58:34 +00:00
Steven Barth
d644d1bd5e
iproute2: fix header problem for musl
...
iproute2 includes "sanitized" linux kernel headers, which work fine for uClibc, however
with musl there is some header conflict, principally some ipv6 structure redefinition. This
patch removes <linux/in6.h> from include/linux/if_bridge.h to solve the problem.
Signed-off-by: Russell Senior <russell@personaltelco.net>
SVN-Revision: 43992
2015-01-17 10:58:29 +00:00
Steven Barth
148684bbf4
iproute2: bump version to 3.18.0
...
Signed-off-by: Russell Senior <russell@personaltelco.net>
SVN-Revision: 43991
2015-01-17 10:58:22 +00:00
John Crispin
03a708a0db
kernel: add references to openwrt alternative button handling
...
Add documentation that makes it easier to find the alternative,
recommended, and default handling for buttons in OpenWrt.
Signed-off-by: Karl Palsson <karlp@tweak.net.au>
SVN-Revision: 43989
2015-01-17 07:07:28 +00:00
Jo-Philipp Wich
59cab6dd48
dnsmasq: support and use local-service by default ( #14951 )
...
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
SVN-Revision: 43982
2015-01-16 19:04:19 +00:00
Imre Kaloz
8a103d5c56
mvebu: fixups for the new driver
...
Signed-off-by: Imre Kaloz <kaloz@openwrt.org>
SVN-Revision: 43978
2015-01-16 08:44:15 +00:00
Steven Barth
3138207f48
openssl: update to 1.0.1l *sigh*
...
Signed-off-by: Steven Barth <steven@midlink.org>
SVN-Revision: 43976
2015-01-15 17:59:06 +00:00
Felix Fietkau
a570ccd7e2
ath9k: fix irq storm issues ( #18483 )
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 43971
2015-01-14 13:20:38 +00:00
Luka Perkov
5b0849b97f
mdns: install uci package as config
...
Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
SVN-Revision: 43967
2015-01-14 09:59:26 +00:00
Steven Barth
252bb0eeae
map: export calculated ruleset to /tmp
...
Signed-off-by: Steven Barth <steven@midlink.org>
SVN-Revision: 43961
2015-01-13 19:00:39 +00:00
Rafał Miłecki
adaac86c7f
hostapd: backport patch fixing handling new stations
...
This patch fixes adding new stations for some specific drivers when
using more than 1 BSS.
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
SVN-Revision: 43951
2015-01-12 22:10:00 +00:00
Steven Barth
98cb5c3a55
nftables: add missing patch
...
Signed-off-by: Steven Barth <steven@midlink.org>
SVN-Revision: 43949
2015-01-12 12:40:08 +00:00
Steven Barth
05220c415c
nftables: bump again and disable building docs
...
Signed-off-by: Steven Barth <steven@midlink.org>
SVN-Revision: 43948
2015-01-12 12:39:14 +00:00
Imre Kaloz
a2ed38f7b6
pwm support can't be compiled as a module
...
Signed-off-by: Imre Kaloz <kaloz@openwrt.org>
SVN-Revision: 43947
2015-01-12 11:58:41 +00:00
Steven Barth
d73c382a73
map: ignore psid and psidlen if psidlen is 0
...
Signed-off-by: Steven Barth <steven@midlink.org>
SVN-Revision: 43946
2015-01-12 10:56:54 +00:00
Steven Barth
6150714eb0
nftables: bump to latest and enable debugging
...
Signed-off-by: Steven Barth <steven@midlink.org>
SVN-Revision: 43944
2015-01-12 06:16:51 +00:00
Nicolas Thill
a46965888a
fuse: update to 2.9.3
...
Signed-off-by: Nicolas Thill <nico@openwrt.org>
SVN-Revision: 43941
2015-01-11 22:15:03 +00:00
Jo-Philipp Wich
e0daabc8ec
ltq-vmmc: fix broken autoconf invocation
...
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
SVN-Revision: 43934
2015-01-11 16:53:59 +00:00
Jo-Philipp Wich
18fd9db4e3
ltq-tapi: fix broken autoconf invocation
...
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
SVN-Revision: 43933
2015-01-11 16:53:52 +00:00
Jo-Philipp Wich
cb01d94199
ltq-ifxos: fix broken autoconf invocation
...
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
SVN-Revision: 43932
2015-01-11 16:53:45 +00:00
Jo-Philipp Wich
d6beac80f8
ltq-adsl: fix broken autoconf invocation
...
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
SVN-Revision: 43931
2015-01-11 16:53:34 +00:00
Felix Fietkau
2ff6a5f618
libusb: update to version 1.0.19
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 43930
2015-01-11 16:14:23 +00:00
Zoltan Herpai
2513eb6c19
uboot-sunxi: fix bananapro target, update patch
...
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
SVN-Revision: 43921
2015-01-10 19:12:35 +00:00
Felix Fietkau
64e7b41b2e
popt: update to latest upstream version, fixes build breakage after autofools changes
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 43901
2015-01-09 19:52:27 +00:00
Zoltan Herpai
157e1da749
uboot-sunxi: various updates - use mainline uboot-sunxi version (2015.01-rc3) - add support for Bananapro
...
Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
SVN-Revision: 43899
2015-01-09 19:19:35 +00:00
Jo-Philipp Wich
5cda3e9f7f
gettext-full: update to v0.19.4
...
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
SVN-Revision: 43896
2015-01-09 14:51:29 +00:00
Jo-Philipp Wich
da9782f935
thc-ipv6: update to v2.7
...
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
SVN-Revision: 43894
2015-01-09 12:49:55 +00:00
Jo-Philipp Wich
39d0b8fea8
lldpd: update to v0.7.13
...
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
SVN-Revision: 43891
2015-01-09 12:35:09 +00:00
Steven Barth
4fde177b7a
procd: fix console bringup on UML (again...)
...
Signed-off-by: Steven Barth <steven@midlink.org>
SVN-Revision: 43890
2015-01-09 08:39:16 +00:00
John Crispin
31eadd07f2
base-files: Fix switch settings for uci-defaults-new.sh.
...
The enable and reset settings need to be added even when they're false. This is true at least for 'enable', that seems to default to true otherwise.
Signed-off-by: Vittorio Gambaletta <openwrt@vittgam.net>
SVN-Revision: 43887
2015-01-08 20:26:52 +00:00
John Crispin
52c949e448
openvpn: procd_set_param respawn
...
Makes sure that the openvpn instance gets restarted in case of a crash.
Intentional stops using /etc/init.d/openvpn stop will not result in
respawning. Anything else will, e.g. killall openvpn.
Signed-off-by: Lars Gierth <larsg@systemli.org>
SVN-Revision: 43886
2015-01-08 20:26:41 +00:00
Steven Barth
dbca1e5662
openssl: bump to 1.0.1j
...
Signed-off-by: Steven Barth <steven@midlink.org>
SVN-Revision: 43875
2015-01-08 18:29:26 +00:00
Jo-Philipp Wich
a6a142caf6
firewall: respect src_dip option for reflection ( #18544 )
...
Also fix wrong IPv4 netmask calculation on x86-64, thanks Ulrich Weber.
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
SVN-Revision: 43874
2015-01-08 16:10:46 +00:00
Jo-Philipp Wich
3f26960a5c
base-files: update default url template and complete kconfig help
...
Change the kconfig default for the repository url template to use "%s"
instead of "%T" as well.
Also complete the kconfig help text do cover the recently introduced
manufacturer, product and hwrev options.
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
SVN-Revision: 43872
2015-01-08 12:46:44 +00:00
Steven Barth
afff105706
nftables: bump to latest git / all patches upstreamed
...
Signed-off-by: Steven Barth <steven@midlink.org>
SVN-Revision: 43870
2015-01-08 11:31:36 +00:00
Jo-Philipp Wich
15d8db1f8c
build: add version number to filenames
...
This commit introduces a new option CONFIG_VERSION_FILENAMES which causes
OpenWrt to embed the version number in generated image files, SDK- and
ImageBuilder archives.
The option is enabled by default if CONFIG_VERSIONOPT is set.
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
SVN-Revision: 43869
2015-01-08 11:02:00 +00:00
Rafał Miłecki
3e0817d606
fstools: update to the latest git HEAD
...
This allows using UBIFS volume as overlay and adds support for Btrfs.
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
SVN-Revision: 43868
2015-01-07 17:10:02 +00:00
Felix Fietkau
c228aeef61
package/binutils: actually support the target toolchain
...
This fixes a bug, where ld on ARM EABI platforms expects OABI code.
Signed-off-by: Harald Geyer <harald@ccbib.org>
SVN-Revision: 43866
2015-01-07 16:02:59 +00:00
Jo-Philipp Wich
7f6af5ddc9
qos-scripts: bump PKG_REVISION and copyright year
...
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
SVN-Revision: 43860
2015-01-06 12:42:38 +00:00
Jo-Philipp Wich
a0fb139369
openvpn: bump PKG_REVISION and copyright year
...
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
SVN-Revision: 43859
2015-01-06 12:41:22 +00:00
Steven Barth
2c4d88c503
openssl: fix CVE-2014-3569
...
Signed-off-by: Steven Barth <steven@midlink.org>
SVN-Revision: 43858
2015-01-06 09:59:55 +00:00
Felix Fietkau
321f4a1e2c
kernel: add missing dependency for kmod-crypto-ghash
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 43857
2015-01-05 21:37:29 +00:00
Felix Fietkau
b898695bdd
mac80211: fix ad-hoc basic/multicast rate regression from r43782
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 43853
2015-01-05 13:19:20 +00:00