[ptxdist] libsodium rule for ptxdist

Hi, I created a build rule for the crypto library libsodium, a fork of djb's NaCl library with an improved API (much easier to use, with higher level abstractions, etc). Author: Clemens Gruber clemens.gru...@pqgruber.com Date: Sun Jul 27 00:44:30 2014 +0200 Add build rule for libsodium

[ptxdist] [PATCH] chrony: Select missing dependency libcap

Signed-off-by: Clemens Gruber clemens.gru...@pqgruber.com --- rules/chrony.in | 1 + 1 file changed, 1 insertion(+) diff --git a/rules/chrony.in b/rules/chrony.in index 8e436ba..5a79f93 100644 --- a/rules/chrony.in +++ b/rules/chrony.in @@ -5,6 +5,7 @@ menuconfig CHRONY tristate

[ptxdist] [PATCH 3/3] openssh: Bump to current stable version 6.8p1

Signed-off-by: Clemens Gruber clemens.gru...@pqgruber.com --- rules/openssh.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/openssh.make b/rules/openssh.make index b43e147..4277148 100644 --- a/rules/openssh.make +++ b/rules/openssh.make @@ -17,8 +17,8

[ptxdist] [PATCH 1/3] openssh: Generate Ed25519 keys instead of DSA keys

as it was with DSA or ECDSA. Besides being more secure than DSA, its performance is better too. More info on Ed25519: http://ed25519.cr.yp.to Signed-off-by: Clemens Gruber clemens.gru...@pqgruber.com --- generic/etc/rc.once.d/openssh | 8 generic/etc/ssh/sshd_config | 2 +- 2 files changed, 5

[ptxdist] [PATCH 2/3] openssh: Enable pre-auth sandboxing

On Linux, OpenSSH tries to use seccomp and falls back to rlimit if seccomp is not available. Since OpenSSH 6.2, the Linux seccomp-filter sandbox is supported on ARM platforms. Signed-off-by: Clemens Gruber clemens.gru...@pqgruber.com --- generic/etc/ssh/sshd_config | 2 +- 1 file changed, 1

[ptxdist] [PATCH 0/3] OpenSSH improvements

Hi, I have three OpenSSH patches for ptxdist: Generating Ed25519 keys by default (and no longer generating DSA keys by default), enabling the privilege separation sandbox and bumping the version to 6.8p1 Best regards, Clemens Clemens Gruber (3): openssh: Generate Ed25519 keys instead of DSA

[ptxdist] [PATCH v2] udev: fix error on kernels without uevent helpers

-by: Clemens Gruber clemens.gru...@pqgruber.com --- Sorry for the previous mail, I made a mistake in the conditional. --- projectroot/etc/init.d/udev | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/projectroot/etc/init.d/udev b/projectroot/etc/init.d/udev index 1020b40..5c1bf42

[ptxdist] [PATCH] udev: fix error on kernels without uevent helpers

-by: Clemens Gruber clemens.gru...@pqgruber.com --- projectroot/etc/init.d/udev | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/projectroot/etc/init.d/udev b/projectroot/etc/init.d/udev index 1020b40..a7722b7 100644 --- a/projectroot/etc/init.d/udev +++ b/projectroot/etc/init.d/udev

[ptxdist] [PATCH v2 1/3] openssh: replace dsa with ed25519 host keys

security, because the default size of RSA keys is 2048-bit and only 1024-bit for DSA, whereas Ed25519 is as secure as a 3000-bit RSA key. For more details, here is the paper: http://ed25519.cr.yp.to/ed25519-20110926.pdf Signed-off-by: Clemens Gruber clemens.gru...@pqgruber.com --- projectroot/etc

[ptxdist] [PATCH] Add procps-ng, an improved version of procps

As procps is no longer maintained and many distributions are using procps-ng now, I think it should also be available in ptxdist. Contains the new top, vmstat and pkill in addition to improved versions of pgrep, ps, slabtop, sysctl and w. Signed-off-by: Clemens Gruber clemens.gru...@pqgruber.com

[ptxdist] [PATCH] busybox: version bump 1.23.1 - 1.23.2

Signed-off-by: Clemens Gruber clemens.gru...@pqgruber.com --- .../0200-reactivate-check-for-tty.patch| 28 ...mat-warning-when-building-applets-usage_p.patch | 30 - ...ystem-only-pass-real-libs-to-SELINUX_LIBS.patch | 23 -- ...link-honour-SKIP_STRIP

[ptxdist] [PATCH] procps: switch from procps to procps-ng

The procps package is unmaintained, therefore switch to procps-ng, which is used by many major distributions. Cc: Michael Olbrich m.olbr...@pengutronix.de Signed-off-by: Clemens Gruber clemens.gru...@pqgruber.com --- rules/procps.in | 151

[ptxdist] [PATCH] iputils: update to s20140519

Since 2014, the development takes place on GitHub. Updated the URL and bumped the version. Signed-off-by: Clemens Gruber clemens.gru...@pqgruber.com --- rules/iputils.make | 8 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/rules/iputils.make b/rules/iputils.make index

[ptxdist] OpenSSH patches

Hi Michael, what do you think about my recent OpenSSH patches (not the version bumps) but enabling the sandbox per default (to use seccomp if available) and the switch from DSA to Ed25519. ArchLinux and current Debian both generate Ed25519 pubkeys by default and add them as HostKey to

[ptxdist] [PATCH] openssh: bump version to 7.0p1

Changelog: http://www.openssh.com/txt/release-7.0 Signed-off-by: Clemens Gruber clemens.gru...@pqgruber.com --- rules/openssh.make | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/rules/openssh.make b/rules/openssh.make index 931b207..fe194c3 100644 --- a/rules

Re: [ptxdist] OpenSSH patches

On Tue, Jul 14, 2015 at 12:03:47PM +0200, Michael Olbrich wrote: On Tue, Jul 07, 2015 at 10:52:52AM +0200, Clemens Gruber wrote: what do you think about my recent OpenSSH patches (not the version bumps) but enabling the sandbox per default (to use seccomp if available) and the switch

[ptxdist] openssh and chrony patches

Hi Michael, would be great if my OpenSSH patch could make it into the next ptxdist release. The chrony patch should probably stay in master for one month to ensure it does not break anything. Any comments on the two patches? I tested connecting to the host from ArchLinux, Debian, Windows

Re: [ptxdist] [PATCH] openssh: improve rc.once.d script and harden sshd_config

Hi Michael, On Fri, Aug 07, 2015 at 12:45:48PM +0200, Michael Olbrich wrote: Forgot the attachment... Michael -- Pengutronix e.K. | | Industrial Linux Solutions | http://www.pengutronix.de/ | Peiner Str. 6-8, 31137

[ptxdist] [PATCH v2] openssh: improve rc.once.d script and harden sshd_config

options from Debian as they may be useful for many users but it is not advisable to enable them in general. (e.g. AcceptEnv) Signed-off-by: Clemens Gruber clemens.gru...@pqgruber.com --- Changes in v2: - Rebased - Use improved openssh rc.once.d script from Michael Olbrich --- projectroot/etc

[ptxdist] [PATCH] openssh: improve rc.once.d script and harden sshd_config

mechanism (using seccomp) is used, if available. Signed-off-by: Clemens Gruber clemens.gru...@pqgruber.com --- projectroot/etc/rc.once.d/openssh | 69 ++ projectroot/etc/ssh/sshd_config | 79 ++- 2 files changed, 74 insertions(+), 74

[ptxdist] Replace MD5 with SHA256 hashes all at once

Hi Bruno, Hi Michael, what do you think about a script to replace all existing MD5 hashes with SHA256 instead of replacing all of them individually? Regards, Clemens -- ptxdist mailing list ptxdist@pengutronix.de

[ptxdist] [PATCH] chrony: update to 2.1.1 and improve configuration

. Signed-off-by: Clemens Gruber clemens.gru...@pqgruber.com --- projectroot/etc/chrony/chrony.conf | 127 + projectroot/etc/chrony/chrony.keys | 4 -- projectroot/etc/init.d/chrony | 72 +++-- rules/chrony-bbinit.in | 5 +- rules

Re: [ptxdist] [PATCH] lldpd: bump version to 0.7.19

On Mon, Nov 09, 2015 at 10:58:12AM +0100, Clemens Gruber wrote: > Hi Alexander, > > On Mon, Nov 09, 2015 at 08:46:09AM +0100, Alexander Dahl wrote: > > Hei hei, > > > > Am 2015-11-07 18:26, schrieb Clemens Gruber: > > > -LLDPD_

[ptxdist] [PATCH v2] lldpd: bump version to 0.7.19

Update lldpd to 0.7.19 Add an option for JSON output format and custom TLV support Update minimum kernel version in LLDP_OLDIES Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- rules/lldpd.in | 12 +++- rules/lldpd.make | 6 -- 2 files changed, 15 insertions

Re: [ptxdist] [PATCH] lldpd: bump version to 0.7.19

Hi Alexander, On Mon, Nov 09, 2015 at 08:46:09AM +0100, Alexander Dahl wrote: > Hei hei, > > Am 2015-11-07 18:26, schrieb Clemens Gruber: > > -LLDPD_VERSION := 0.7.6 > > -LLDPD_MD5 := dbd90a68b91448dcb94a4a77c5d8ef65 > > +LLDPD_VERSION

[ptxdist] [PATCH] openssh: harden security options and host keys

: Enabled sandboxing, reduced login grace time, strict mode, etc. Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- projectroot/etc/rc.once.d/openssh | 68 ++-- projectroot/etc/ssh/sshd_config | 95 ++- 2 files chang

[ptxdist] [PATCH v2] openssh: harden security options and host keys

: Enabled sandboxing, reduced login grace time, strict mode, etc. Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- Changes from v1: Corrected a mistake in the sftp path. --- projectroot/etc/rc.once.d/openssh | 68 ++-- projectroot/etc/ssh/sshd_config

[ptxdist] [PATCH] mpg123: bump version to 1.22.4 and add license hash

Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- rules/mpg123.make | 6 -- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/rules/mpg123.make b/rules/mpg123.make index 7ae5b26..d8d89be 100644 --- a/rules/mpg123.make +++ b/rules/mpg123.make @@ -16,14

[ptxdist] [PATCH] ethtool: bump version to 4.2

Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- rules/ethtool.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/ethtool.make b/rules/ethtool.make index 6eba653..ce79d4f 100644 --- a/rules/ethtool.make +++ b/rules/ethtool.make @@ -17,8

[ptxdist] [PATCH] lldpd: bump version to 0.7.19

Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- rules/lldpd.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/lldpd.make b/rules/lldpd.make index 37ba590..3c015bf 100644 --- a/rules/lldpd.make +++ b/rules/lldpd.make @@ -16,8 +16,8 @@ PA

[ptxdist] [PATCH 2/3] file: bump version to 5.24

Bump version of the file tool to 5.24 (many security vulnerabilities fixed since 5.19) and specify the used license. Signed-off-by: Clemens Gruber clemens.gru...@pqgruber.com --- rules/file.make | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/rules/file.make b/rules

[ptxdist] [PATCH 1/3] openssh: bump version to 7.1p1

Bump OpenSSH version to 7.1p1 and remove --without-ssh1 configure flag as SSH1 is now disabled by default. Signed-off-by: Clemens Gruber clemens.gru...@pqgruber.com --- rules/openssh.make | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/rules/openssh.make b/rules

[ptxdist] [PATCH v2 2/3] file: bump version to 5.24

Bump version of the file tool to 5.24 (many security vulnerabilities fixed since 5.19) and specify the used license. Signed-off-by: Clemens Gruber clemens.gru...@pqgruber.com --- ...p-around-Remi-Collet-at-redhat-cherry-pic.patch | 26 -- patches/file-5.19/series

[ptxdist] [PATCH v2 1/3] openssh: bump version to 7.1p1

Signed-off-by: Clemens Gruber clemens.gru...@pqgruber.com --- rules/openssh.make | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/rules/openssh.make b/rules/openssh.make index 931b207..ba5032e 100644 --- a/rules/openssh.make +++ b/rules/openssh.make @@ -17,8 +17,9

Re: [ptxdist] [PATCH 2/3] file: bump version to 5.24

Hi Jürgen, On Thu, Aug 27, 2015 at 10:21:12AM +0200, Juergen Borleis wrote: Hi Clemens, On Wednesday 26 August 2015 23:04:51 Clemens Gruber wrote: Bump version of the file tool to 5.24 (many security vulnerabilities fixed since 5.19) and specify the used license. Signed-off

Re: [ptxdist] [PATCH 1/3] openssh: bump version to 7.1p1

Hi Jürgen, On Thu, Aug 27, 2015 at 10:19:22AM +0200, Juergen Borleis wrote: Hi Clemens, On Wednesday 26 August 2015 23:04:50 Clemens Gruber wrote: Bump OpenSSH version to 7.1p1 and remove --without-ssh1 configure flag as SSH1 is now disabled by default. Signed-off-by: Clemens Gruber

[ptxdist] [PATCH v2] lldpd: update to 0.7.19 and add systemd support

Bump version to current stable version 0.7.19. Add options for custom TLV and JSON support. Add systemd unit and adapt rule file accordingly. Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- This was tested with systemd and busybox init. Several Cisco switches were de

[ptxdist] [PATCH 4/6] host-mpc: bump version to 1.0.3

Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- rules/host-mpc.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/host-mpc.make b/rules/host-mpc.make index 156b8e1..e257151 100644 --- a/rules/host-mpc.make +++ b/rules/host-mpc.make @@ -16,8

[ptxdist] [PATCH 1/6] host-gmp: bump version to 6.1.0

Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- guess-disable-build-tests-to-use-generic.patch | 22 -- patches/gmp-6.0.0a/series | 4 guess-disable-build-tests-to-use-generic.patch | 22 ++ patch

[ptxdist] [PATCH 2/6] host-isl: bump version to 0.14.1

Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- rules/host-isl.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/host-isl.make b/rules/host-isl.make index f6ad3c1..e86b098 100644 --- a/rules/host-isl.make +++ b/rules/host-isl.make @@ -16,8

[ptxdist] [PATCH 3/6] host-libelf: bump version to 0.164

Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- rules/host-libelf.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/host-libelf.make b/rules/host-libelf.make index d0bb0ac..611be4d 100644 --- a/rules/host-libelf.make +++ b/rules/host-libel

[ptxdist] [PATCH 0/6] OSELAS.Toolchain host tool version bumps

. (Just as a starting point, marked RFC) Thanks, Clemens Clemens Gruber (6): host-gmp: bump version to 6.1.0 host-isl: bump version to 0.14.1 host-libelf: bump version to 0.164 host-mpc: bump version to 1.0.3 host-mpfr: bump version to 3.1.3 host-xz: bump version to 5.2.2 guess

[ptxdist] [PATCH 5/6] host-mpfr: bump version to 3.1.3

Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- rules/host-mpfr.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/host-mpfr.make b/rules/host-mpfr.make index 5586601..13da63d 100644 --- a/rules/host-mpfr.make +++ b/rules/host-mpfr.make @@

[ptxdist] [PATCH 6/6] host-xz: bump version to 5.2.2

Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- rules/host-xz.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/host-xz.make b/rules/host-xz.make index f73e676..75926ff 100644 --- a/rules/host-xz.make +++ b/rules/host-xz.make @@ -16,8

[ptxdist] [PATCH 1/2] libkmod: bump version to 22

Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- rules/libkmod.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/libkmod.make b/rules/libkmod.make index 8c857c5..f6d5a72 100644 --- a/rules/libkmod.make +++ b/rules/libkmod.make @@ -16,8

Re: [ptxdist] systemd: seccomp

Hi, On Sun, Nov 29, 2015 at 04:47:13PM +0100, Uwe Kleine-König wrote: > Hello, > > On Sun, Nov 29, 2015 at 04:21:32PM +0100, Clemens Gruber wrote: > > I noticed that the systemd rule in ptxdist explicitly disables seccomp > > support. Would be great to have support

Re: [ptxdist] [PATCH 0/6] OSELAS.Toolchain host tool version bumps

On Thu, Dec 17, 2015 at 11:49:17AM +0100, Michael Olbrich wrote: > On Mon, Dec 14, 2015 at 02:51:45PM +0100, Ladislav Michl wrote: > > On Sun, Dec 13, 2015 at 08:37:14PM +0100, Robert Schwebel wrote: > > > Hi Clemens, > > > > > > On Sun, Dec 13, 2015 at 04

[ptxdist] systemd: seccomp

Hi, I noticed that the systemd rule in ptxdist explicitly disables seccomp support. Would be great to have support for SystemCallFilter in service files. I therefore added libseccomp and modified the systemd rule to enable seccomp (optionally via a menu entry). I use the current git master Linux

[ptxdist] [PATCH] lldpd: update to 0.7.19 and add systemd support

Bump version to current stable version 0.7.19. Add options for custom TLV and JSON support. Add systemd unit and adapt rule file accordingly. Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- projectroot/lib/systemd/system/lldpd.service | 13 rules/ll

Re: [ptxdist] [PATCH] lldpd: bump version to 0.7.19

Hi, On Mon, Nov 16, 2015 at 02:26:53PM +0100, Alexander Dahl wrote: > We're still using bbinit here, didn't have time to play with systemd for > three years now. :-( I am setting up systemd right now on a test machine. Michael: Please don't merge the lldpd patch yet, I'll add the systemd

Re: [ptxdist] iproute2 build errors when updating to 4.6

Hi Alex, On Tue, May 24, 2016 at 08:08:25PM +0200, Alexander Aring wrote: > from what I noticed from iptables git log, etc, they renamed > iptables_target to xtables_target etc, some function are not exported > from lib anymore (if they are still used in m_ipt.o then do a static > inline). > >

Re: [ptxdist] [PATCH] systemd: add setting to enable ldconfig service

Hi Michael, On Thu, May 26, 2016 at 11:53:30AM +0200, Michael Olbrich wrote: > Not like this. This should be handled in rc-once where the rootfs is > actually writeable. Also, as far as I know, there is currently no option to > install ldconfig. You should probably with a patch for this. Hm, you

Re: [ptxdist] [ANNOUNCE] PTXdist 2016.05.0 released

Hi, On Mon, May 30, 2016 at 07:27:40PM +0200, Michael Olbrich wrote: > I'm happy to announce that I've just released ptxdist-2016.05.0. Out-of-tree kernel modules seem to be broken in the new ptxdist version 2016.05.0. Loading an out-of-tree module leads to: mymodule: module has no symbols

Re: [ptxdist] iproute2 build errors when updating to 4.6

Hi, On Sun, May 29, 2016 at 08:31:07PM +0200, Alexander Aring wrote: > I just sent the patch to netdev for iproute2 and cc you. If all is fine > from netdev people, do you want to send your work for iproute2 version > bump to mainline ptxdist? Great! Hm, I think you deserve the credit for the

Re: [ptxdist] [ANNOUNCE] OSELAS.Toolchain() 2016.06.0 released

Hi, On Wed, Jun 22, 2016 at 02:10:06PM +0200, Michael Olbrich wrote: > Hi, > > I'm happy to announce that I've just released OSELAS.Toolchain-2016.06.0. Nice, thank you! I am getting an error during the cross-gcc build however. Here is the last part of the build log: (snip) Exporting

Re: [ptxdist] [ANNOUNCE] OSELAS.Toolchain() 2016.06.0 released

On Wed, Jun 22, 2016 at 03:22:30PM +0200, Clemens Gruber wrote: > Hi, > > On Wed, Jun 22, 2016 at 02:10:06PM +0200, Michael Olbrich wrote: > > Hi, > > > > I'm happy to announce that I've just released OSELAS.Toolchain-2016.06.0. > > Nice, thank you! > >

[ptxdist] [PATCH] e2fsprogs: bump version and update build flags

Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- rules/e2fsprogs.in| 6 -- rules/e2fsprogs.make | 15 ++- rules/host-e2fsprogs.in | 2 +- rules/host-e2fsprogs.make | 7 ++- 4 files changed, 9 insertions(+), 21 deletions(-) diff --git a

Re: [ptxdist] [PATCH] util-linux-ng: enable systemd flag if systemd is used

On Wed, Jun 15, 2016 at 07:10:25AM +0200, Michael Olbrich wrote: > On Wed, Jun 15, 2016 at 12:21:21AM +0200, Clemens Gruber wrote: > > Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> > > This is broken. --with-systemd requires libsystemd and systemd requir

Re: [ptxdist] [PATCH] sqlite: version bump and improved build options

On Wed, Jun 15, 2016 at 08:46:37AM +0200, Marc Kleine-Budde wrote: > On 06/15/2016 07:08 AM, Michael Olbrich wrote: > > On Wed, Jun 15, 2016 at 12:21:19AM +0200, Clemens Gruber wrote: > >> - Bump the version to 3.13.0: http://sqlite.org/releaselog/3_13_0.html > >> - U

[ptxdist] [PATCH] util-linux-ng: add zramctl option

Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- rules/util-linux-ng.in | 6 ++ rules/util-linux-ng.make | 4 2 files changed, 10 insertions(+) diff --git a/rules/util-linux-ng.in b/rules/util-linux-ng.in index f2dc95a..3a33583 100644 --- a/rules/util-linux-ng.in

[ptxdist] [PATCH] sqlite: version bump and improved build options

with the secure_delete pragma. That build option only controls the default value. Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- rules/sqlite.make | 12 ++-- 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/rules/sqlite.make b/rules/sqlite.make index 5

[ptxdist] [PATCH] util-linux-ng: enable systemd flag if systemd is used

Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- rules/util-linux-ng.in | 4 rules/util-linux-ng.make | 2 +- 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/rules/util-linux-ng.in b/rules/util-linux-ng.in index b0d5e1f..3a33583 100644 --- a/rules/util

[ptxdist] [PATCH] radvd: bump version to 2.13

Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- rules/radvd.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/radvd.make b/rules/radvd.make index cce7ff3..4393835 100644 --- a/rules/radvd.make +++ b/rules/radvd.make @@ -16,10 +16,10 @@ PA

[ptxdist] [PATCH] dbus: version bump to 1.10.8

Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- rules/dbus.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/dbus.make b/rules/dbus.make index 1e4eca2..3401df2 100644 --- a/rules/dbus.make +++ b/rules/dbus.make @@ -18,8 +18,8 @@ PA

Re: [ptxdist] [PATCH] e2fsprogs: bump version and update build flags

On Wed, Jun 15, 2016 at 08:10:38PM +0200, Clemens Gruber wrote: > Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> > --- > rules/e2fsprogs.in| 6 -- > rules/e2fsprogs.make | 15 ++- > rules/host-e2fsprogs.in | 2 +- > rules/

Re: [ptxdist] iproute2 build errors when updating to 4.6

Hi, On Wed, Jun 15, 2016 at 08:37:10PM +0200, Alexander Aring wrote: > patch came upstream today, but I think it takes some time for new > release. What are the great new features in new iproute2 version? For me, the bridging and multicast improvements were important and a bugfix in tc, but in

[ptxdist] [PATCH] procps: bump version to 3.3.11 and update paths

Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- rules/procps.make | 28 ++-- 1 file changed, 14 insertions(+), 14 deletions(-) diff --git a/rules/procps.make b/rules/procps.make index 0152548..56b99ae 100644 --- a/rules/procps.make +++ b/rules/procp

[ptxdist] executables in /usr/bin vs /bin

Hi, in the proposed version bump for procps, the default path changed to /bin instead of /usr/bin. In my patch I just renamed the paths. But maybe that's the wrong approach and we should keep all binaries in /usr/bin ? Debian on the other hand puts most of them in /usr/bin and a few into /bin.

[ptxdist] Strange system library search paths with OSELAS.Toolchain

Hi, when debugging a missing library issue on a ptxdist-2016.01.0 system built with the latest OSELAS.Toolchain, glibc and arm-v7a-linux-gnueabihf as toolchain target, I stumbled across the following strange library search paths, which are searched over and over again for each and every process

[ptxdist] [PATCH] libbsd: bump version to 0.8.2 to fix CVE-2016-2090

Bump the version to 0.8.2, which includes a fix for the heap buffer overflow in fgetwln (CVE-2016-2090). Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- rules/libbsd.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/libbsd.make b/rules/libbs

[ptxdist] [RESEND PATCH] procps: bump version to 3.3.11 and update paths

Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- rules/procps.make | 28 ++-- 1 file changed, 14 insertions(+), 14 deletions(-) diff --git a/rules/procps.make b/rules/procps.make index 0152548..56b99ae 100644 --- a/rules/procps.make +++ b/rules/procp

[ptxdist] [PATCH] lldpd: bump version and add missing dependencies

Bump version to 0.9.0, adjust the kernel version for the oldies flag and add the missing readline and libbsd dependencies, which are not optional. This was probably missed, because both libraries were already selected on many systems. Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.

Re: [ptxdist] Strange system library search paths with OSELAS.Toolchain

Hi Juergen, On Tue, Feb 09, 2016 at 10:31:22AM +0100, Juergen Borleis wrote: > /sysroot-/sbin/ldconfig Very nice, thank you! After running ldconfig on the target, running strace with /bin/true shows only one access for /etc/ld.so.preload before using the /etc/ld.so.cache successfully. That's a

[ptxdist] [PATCH 1/2] libseccomp: new package

Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- rules/libseccomp.in | 13 rules/libseccomp.make | 56 +++ 2 files changed, 69 insertions(+) create mode 100644 rules/libseccomp.in create mode 100644

[ptxdist] [PATCH 2/2] systemd: add option for seccomp support

With seccomp support enabled, service files can limit the syscalls a process is allowed to use through the SystemCallFilter option. Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- rules/systemd.in | 8 rules/systemd.make | 2 +- 2 files changed, 9 insertions

Re: [ptxdist] [PATCH 1/2] libseccomp: new package

Hi Michael, On Thu, Feb 11, 2016 at 12:32:56PM +0100, Michael Olbrich wrote: > On Tue, Feb 09, 2016 at 05:31:13PM +0100, Clemens Gruber wrote: > > Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> > > Thanks, applied. > > Note: The URL was broken for me so

Re: [ptxdist] Strange system library search paths with OSELAS.Toolchain

On Mon, Feb 08, 2016 at 09:58:58AM +0100, Juergen Borleis wrote: > Hi Clemens, > > On Saturday 06 February 2016 16:33:55 Clemens Gruber wrote: > > [...] > > stat64("/lib/vfp", 0x7eb4d6c0) = -1 ENOENT (No such file or directory) > > open("/lib/libc.so.6

Re: [ptxdist] ptxdist locale problems

On Mon, Feb 01, 2016 at 04:36:39PM +0100, Michael Olbrich wrote: > With a corresponding /etc/locale.conf I see > System Locale: LANG=en_US.utf8 Hm, now localectl does show the following: System Locale: LANG=en_US.utf8 But, the "locale" program still shows: LANG= LC_CTYPE="POSIX"

Re: [ptxdist] ptxdist locale problems

On Tue, Feb 02, 2016 at 08:24:12PM +0100, Clemens Gruber wrote: > On Mon, Feb 01, 2016 at 04:36:39PM +0100, Michael Olbrich wrote: > > With a corresponding /etc/locale.conf I see > > System Locale: LANG=en_US.utf8 > > Hm, now localectl does show the following: > System

[ptxdist] ptxdist locale problems

Hi, I am running a ptxdist 2016.01.0 ARM-based system with 4.4 kernel, glibc, systemd and the following ptxdist locale settings: PTXCONF_LOCALES=y PTXCONF_LOCALES_EN_US_UTF8=y PTXCONF_SYSTEMD_LOCALES=y locale -a shows: C POSIX en_US.utf8 But localectl from systemd does not show anything: System

[ptxdist] [PATCH] iproute2: bump version to 4.4

Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- rules/iproute2.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/iproute2.make b/rules/iproute2.make index c50be6c..b6045b9 100644 --- a/rules/iproute2.make +++ b/rules/iproute2.make @@ -17,8

[ptxdist] [PATCH] openssh: bump version to 7.1p2

Contains important security fixes for a client vulnerability, leaking private client user keys to a malicious server. Changelog: http://www.openssh.com/txt/release-7.1p2 Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- rules/openssh.make | 4 ++-- 1 file changed, 2 inse

[ptxdist] [PATCH 1/2] procps: bump version to 3.3.11 and update paths

Although the developers changed the binary paths, we maintain the existing usr split. Everything stays where it was to avoid breaking scripts. There are no patches to migrate. Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- rules/procps.mak

[ptxdist] [PATCH 2/2] Export LANG environment variable for systemd

Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- projectroot/etc/profile.d/systemd.sh | 7 +++ 1 file changed, 7 insertions(+) diff --git a/projectroot/etc/profile.d/systemd.sh b/projectroot/etc/profile.d/systemd.sh index f51d8b9..c4aa9b3 100644 --- a/projectro

Re: [ptxdist] [PATCH 0/6] OSELAS.Toolchain host tool version bumps

Hi Michael, On Fri, Feb 19, 2016 at 02:56:41PM +0100, Michael Olbrich wrote: > I've pushed the relevant commits to the toolchain git. I expect, that > source tarballs with new releases will probably follow next week. We talked about a new toolchain with the latest and greatest (tm) a few months

Re: [ptxdist] [PATCH 0/6] OSELAS.Toolchain host tool version bumps

On Fri, Feb 19, 2016 at 03:59:56PM +0100, Clemens Gruber wrote: > Hi Michael, > > On Fri, Feb 19, 2016 at 02:56:41PM +0100, Michael Olbrich wrote: > > I've pushed the relevant commits to the toolchain git. I expect, that > > source tarballs with new releases will prob

[ptxdist] [PATCH] mpg123: bump version to 1.23.1

Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- rules/mpg123.make | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/rules/mpg123.make b/rules/mpg123.make index d8d89be..536d029 100644 --- a/rules/mpg123.make +++ b/rules/mpg123.make @@ -16,8 +16,8 @@ PA

[ptxdist] [PATCH] openssh: bump version to 7.2p2

The --without-ssh1 option was removed and there is a new --with-ssh1 option. Compiling without SSH1 has now become the default. Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- rules/openssh.make | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a

[ptxdist] [PATCH] lldpd: bump version to 0.9.2

Version bump to 0.9.2. Note: Although lldpd supports libseccomp, it is not (yet) possible to enable seccomp in lldpd for other platforms than x86/x86_64. Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- rules/lldpd.make | 4 ++-- 1 file changed, 2 insertions(+), 2 del

[ptxdist] canutils problem on mainline kernel

Hi, it looks like the canutils from ptxdist do not work anymore with the current mainline kernel 4.6. (Working fine on 4.5) Did you also notice this? I can reproduce it with the flexcan driver on an i.MX6Q board. I get out of range errors when trying to set the bitrate. I saw that some of you

[ptxdist] systemd version

Hi Michael, are you already working on an update of the systemd version in ptxdist? Would be great if we could have at least 229 in the next stable release of ptxdist. Or maybe wait for 230? Thanks, Clemens ___ ptxdist mailing list

Re: [ptxdist] canutils problem on mainline kernel

On Wed, Apr 13, 2016 at 03:52:34PM +0200, Marc Kleine-Budde wrote: > No. What's the outout of: > > canconfig can0 > The output is: no bittiming data found can0: failed to get bitrate > > There was a problem with the CAN clock on some imx in the kernel recently. Hmm. in

Re: [ptxdist] canutils problem on mainline kernel

On Wed, Apr 13, 2016 at 04:17:40PM +0200, Marc Kleine-Budde wrote: > ACK - It's Marc :D Thanks, Marc ;) ___ ptxdist mailing list ptxdist@pengutronix.de

[ptxdist] [PATCH] ethtool: bump version to 4.5

Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- rules/ethtool.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/ethtool.make b/rules/ethtool.make index ce79d4f..c700537 100644 --- a/rules/ethtool.make +++ b/rules/ethtool.make @@ -17,8

[ptxdist] [PATCH] u-boot-tools: bump version to 2016.05

Fixes build errors with GCC 6.1.0. Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- rules/u-boot-tools.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/u-boot-tools.make b/rules/u-boot-tools.make index 42883f1..6cfdbdb 100644 --- a/rules/

[ptxdist] [PATCH] systemd: add setting to enable ldconfig service

calling small binaries like /bin/true. See: LD_DEBUG=libs /bin/true or strace /bin/true Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- rules/systemd.in | 7 +++ rules/systemd.make | 2 +- 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/rules/systemd.in b

Re: [ptxdist] iproute2 build errors when updating to 4.6

Hi Alex, Hi Michael, On Tue, May 24, 2016 at 09:30:41AM +0200, Alexander Aring wrote: > Maybe to add KERNEL_INCLUDE=${KERNEL_HEADERS_DIR) in IPROUTE2_MAKE_OPT is > enough here, or leave it empty to use maybe the fallback? > > I think to updating to use KERNEL_INCLUDE=${KERNEL_HEADERS_DIR) would

[ptxdist] iproute2 build errors when updating to 4.6

Hi, I need some features from the new iproute2 4.6, but there seem to be some kernel header vs glibc header incompatibilities occuring when building the new iproute2 4.6 for ptxdist. Two examples of the numerous build errors on ptxdist 2016.04.0, a toolchain with glibc 2.22 and kernel +

[ptxdist] [PATCH] ca-certificates: fix python call in shebang

On ArchLinux, python defaults to python 3.5.2, which breaks the script. Fix it by calling /usr/bin/env python which uses /bin/python, a symlink to python2. Signed-off-by: Clemens Gruber <clemens.gru...@pqgruber.com> --- scripts/certdata2pem.py | 2 +- 1 file changed, 1 insertion(+), 1 de

Re: [ptxdist] [ANNOUNCE] OSELAS.Toolchain() 2016.06.0 released

Hi, On Mon, Jul 04, 2016 at 08:35:44AM +0200, Michael Olbrich wrote: > Updating md5sums with '--update-md5' when updating toolchain components > works for me. I have no idea why this doesn't work for you. You explained this in the last paragraph. It's only affecting symbols like

  1   2   3   4   5   >