Re: [LEDE-DEV] [PATCH v1 1/1] openssh: disable passwords for openssh server

2018-02-10 Thread Michelle Sullivan
Paul Oranje wrote: Your aptness for seeing the possible attack vectors warrants your judgement ... Op 10 feb. 2018, om 17:07 heeft Philip Prindeville het volgende geschreven: On Feb 10, 2018, at 3:28 AM, Paul Oranje wrote: Wouldn't

Re: [LEDE-DEV] [PATCH v1 1/1] openssh: disable passwords for openssh server

2018-02-10 Thread Michelle Sullivan
Philip Prindeville wrote: On Feb 10, 2018, at 6:03 PM, Michelle Sullivan wrote: Paul Oranje wrote: Your aptness for seeing the possible attack vectors warrants your judgement ... Op 10 feb. 2018, om 17:07 heeft Philip Prindeville

Re: [LEDE-DEV] [PATCH v1 1/1] openssh: disable passwords for openssh server

2018-02-10 Thread Philip Prindeville
> On Feb 10, 2018, at 6:03 PM, Michelle Sullivan wrote: > > Paul Oranje wrote: >> Your aptness for seeing the possible attack vectors warrants your judgement >> ... >> >>> Op 10 feb. 2018, om 17:07 heeft Philip Prindeville >>> het

Re: [LEDE-DEV] [PATCH v1 1/1] openssh: disable passwords for openssh server

2018-02-10 Thread Paul Oranje
Your aptness for seeing the possible attack vectors warrants your judgement ... > Op 10 feb. 2018, om 17:07 heeft Philip Prindeville > het volgende geschreven: > > >> On Feb 10, 2018, at 3:28 AM, Paul Oranje wrote: >> >> Wouldn't it be

Re: [LEDE-DEV] [LEDE-DEV,fstools] mount_extroot: repeat detection for slow devices

2018-02-10 Thread sam_
Thanks for responding, I've tried that. As I stated, until some time there was no problem for this SD card+4G dongle to be found even with single 5 second delay. Then after (what I suspect) electricity blackout, mount_extroot was not able to find corresponding device no matter how much time I

Re: [LEDE-DEV] [PATCH v1 1/1] openssh: disable passwords for openssh server

2018-02-10 Thread Philip Prindeville
> On Feb 10, 2018, at 3:28 AM, Paul Oranje wrote: > > Wouldn't it be appropriate to disallow password authentication on wan only > and allow it on all networks "behind" the router? Not necessarily. That’s why UPnP is such an issue. A machine inside a firewall gets infected

Re: [LEDE-DEV] [LEDE-DEV, fstools] mount_extroot: repeat detection for slow devices

2018-02-10 Thread Jonas Gorski
On 10 February 2018 at 13:41, wrote: > I'm using extroot on SD card in 4G dongle attached to USB of my TP-Link > Archer C2. For reasons unknown to me it started to take more than 10 seconds > to show among devices, this patch adds 2 more detection attempts/delays to > already

[LEDE-DEV] [PATCH 2/2] packages: uboot-mxs: override instead of appending u-boot make flags

2018-02-10 Thread Michael Heimpold
This prevents passing down the HOSTCC stuff set in u-boot.mk which results in linking errors against openssl: tools/mxsimage.o: In function `sb_aes_reinit': mxsimage.c:(.text+0x202): undefined reference to `EVP_CIPHER_CTX_reset' tools/mxsimage.o: In function `mxsimage_generate':

[LEDE-DEV] [PATCH 1/2] packages: uboot-mxs: bump to 2017.11

2018-02-10 Thread Michael Heimpold
Also update the U-Boot BSP patch for I2SE Duckbill devices. Signed-off-by: Michael Heimpold --- package/boot/uboot-mxs/Makefile| 4 +- .../uboot-mxs/patches/001-add-i2se-duckbill.patch | 408 +++-- 2 files changed, 292 insertions(+), 120

[LEDE-DEV] [PATCH] mxs: rename files to files-4.9

2018-02-10 Thread Michael Heimpold
The Device Tree file for I2SE Duckbill boards was updated upstream. Let's use the upstream version for upcoming kernel 4.14 by keeping our current version for v4.9 still around. Signed-off-by: Michael Heimpold --- .../linux/mxs/{files =>

[LEDE-DEV] [LEDE-DEV,fstools] mount_extroot: repeat detection for slow devices

2018-02-10 Thread sam_
I'm using extroot on SD card in 4G dongle attached to USB of my TP-Link Archer C2. For reasons unknown to me it started to take more than 10 seconds to show among devices, this patch adds 2 more detection attempts/delays to already existing 5s. --- diff --git a/block.c b/block.c index