[LEDE-DEV] [OpenWrt-Devel] [PATCH v2 3/3] imx6: remove support for 4.9

2018-02-14 Thread Tim Harvey
Signed-off-by: Tim Harvey --- target/linux/imx6/config-4.9 | 497 .../files-4.9/arch/arm/boot/dts/imx6dl-gw5904.dts | 19 - .../files-4.9/arch/arm/boot/dts/imx6q-gw5904.dts | 23 - .../arch/arm/boot/dts/imx6qdl-gw5904.dtsi | 629 ---

[LEDE-DEV] [OpenWrt-Devel] [PATCH v2 0/3]: imx6: update to Linux 4.14

2018-02-14 Thread Tim Harvey
Testted on a Gateworks GW54xx. Does not support enabling imx-drm modules yet as those will need some adjustments based on kernel configs. v2: - move dwc pci patch to generic (Koen) - added E1000E driver (used on GW552x) - remove unnecessary EXT2/EXT3 (Michael) - remove config default config fo

[LEDE-DEV] [OpenWrt-Devel] [PATCH v2 1/3] imx6: add support for Linux 4.14

2018-02-14 Thread Tim Harvey
Signed-off-by: Tim Harvey --- v2: - move dwc pci patch to generic (Koen) - added E1000E driver (used on GW552x) - remove unnecessary EXT2/EXT3 (Michael) - remove config default config for 14.4 Signed-off-by: Tim Harvey --- target/linux/imx6/config-4.14 | 520 +++

[LEDE-DEV] [OpenWrt-Devel] [PATCH v2 2/3] imx6: switch to Linux 4.14

2018-02-14 Thread Tim Harvey
Signed-off-by: Tim Harvey --- target/linux/imx6/Makefile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/target/linux/imx6/Makefile b/target/linux/imx6/Makefile index ae6a9b0..152a58e 100644 --- a/target/linux/imx6/Makefile +++ b/target/linux/imx6/Makefile @@ -14,7 +14,7 @@ CP

Re: [LEDE-DEV] [PATCH 1/4] kernel: add missing config symbols

2018-02-14 Thread Tim Harvey
On Mon, Feb 12, 2018 at 12:41 PM, Hauke Mehrtens wrote: > On 02/01/2018 11:35 PM, Tim Harvey wrote: >> Signed-off-by: Tim Harvey >> --- >> target/linux/generic/config-4.14 | 9 - >> 1 file changed, 8 insertions(+), 1 deletion(-) >> >> diff --git a/target/linux/generic/config-4.14 >> b/t

Re: [LEDE-DEV] [PATCH v1 1/1] openssh: disable passwords for openssh server

2018-02-14 Thread Alberto Bursi
On 02/14/2018 10:53 PM, David Woodhouse wrote: On Wed, 2018-02-14 at 22:51 +0100, Alberto Bursi wrote: Just change the WAN ssh port number to something in the dynamic port range, pretty much 0 bots scan beyond the few well-known ports range, and you save CPU resources too. We're talking about

Re: [LEDE-DEV] [PATCH v1 1/1] openssh: disable passwords for openssh server

2018-02-14 Thread Magnus Kroken
On 14.02.2018 22.13, Michelle Sullivan wrote: FWIW, I had misunderstood the intent of the original comments... OpenSSH server vs Dropbear - if someone is using OpenSSH server they already went in with advanced config as Dropbear is the default - I'd err on the side of security as they should alre

Re: [LEDE-DEV] [PATCH v1 1/1] openssh: disable passwords for openssh server

2018-02-14 Thread Michelle Sullivan
David Woodhouse wrote: On Wed, 2018-02-14 at 22:51 +0100, Alberto Bursi wrote: Just change the WAN ssh port number to something in the dynamic port range, pretty much 0 bots scan beyond the few well-known ports range, and you save CPU resources too. We're talking about the default config here t

Re: [LEDE-DEV] [PATCH v1 1/1] openssh: disable passwords for openssh server

2018-02-14 Thread David Woodhouse
On Wed, 2018-02-14 at 22:51 +0100, Alberto Bursi wrote: > Just change the WAN ssh port number to something in the dynamic port  > range, pretty much 0 bots scan beyond the few well-known ports > range, and you save CPU resources too. We're talking about the default config here though. Please let's

Re: [LEDE-DEV] [PATCH v1 1/1] openssh: disable passwords for openssh server

2018-02-14 Thread Alberto Bursi
On 02/14/2018 10:36 PM, David Woodhouse wrote: On Wed, 2018-02-14 at 12:34 -0700, Philip Prindeville wrote: Once I was messing with firewall settings and accidentally disabled the firewall.  Within a few minutes, there were all sorts of password attacks on the WAN port.  Having a sufficiently

Re: [LEDE-DEV] [PATCH v1 1/1] openssh: disable passwords for openssh server

2018-02-14 Thread David Woodhouse
On Wed, 2018-02-14 at 12:34 -0700, Philip Prindeville wrote: > Once I was messing with firewall settings and accidentally disabled > the firewall.  Within a few minutes, there were all sorts of password > attacks on the WAN port.  Having a sufficiently complex password > slowed things down long eno

Re: [LEDE-DEV] [PATCH v1 1/1] openssh: disable passwords for openssh server

2018-02-14 Thread Michelle Sullivan
Philip Prindeville wrote: On Feb 13, 2018, at 9:14 PM, Michelle Sullivan wrote: [snip] Personally - my thoughts There should be an option to enable passwords (default off...) A warning should be placed on the checkbox to inform the user it is not a good idea to enable them. SSH should

Re: [LEDE-DEV] [PATCH v1 1/1] openssh: disable passwords for openssh server

2018-02-14 Thread Philip Prindeville
> On Feb 14, 2018, at 1:25 AM, Stijn Segers wrote: > > Yousong Zhou schreef op 14 februari 2018 09:06:11 CET: >> >> No, it's just complicating things up. When people really cares about >> the default settings' security, the will override the default by also >> specifying files/etc/ssh/sshd_c

Re: [LEDE-DEV] [PATCH v1 1/1] openssh: disable passwords for openssh server

2018-02-14 Thread Philip Prindeville
> On Feb 14, 2018, at 1:06 AM, Yousong Zhou wrote: > > On 14 February 2018 at 11:53, Philip Prindeville > wrote: >> >>> On Feb 11, 2018, at 3:54 AM, Yousong Zhou wrote: >>> >>> On 9 February 2018 at 08:28, Philip Prindeville >>> wrote: From: Philip Prindeville Allowing pas

Re: [LEDE-DEV] [PATCH v1 1/1] openssh: disable passwords for openssh server

2018-02-14 Thread Philip Prindeville
> On Feb 13, 2018, at 9:14 PM, Michelle Sullivan wrote: > > [snip] > Personally - my thoughts > > There should be an option to enable passwords (default off...) > A warning should be placed on the checkbox to inform the user it is not a > good idea to enable them. > SSH should be disable

Re: [LEDE-DEV] [PATCH] ag71xx: Add some unlikely calls + rearange some stuff in hard_start_xmit.

2018-02-14 Thread Rosen Penev
On Tue, Feb 13, 2018 at 10:52 PM, John Crispin wrote: > > > On 13/02/18 23:53, Rosen Penev wrote: >> >> Based on Qualcomm driver. Improves iperf3 throughput by ~20mbps on >> transmit on Archer C7v4. > > > this is missing the description of what the patch does. Unfortunately I have no real idea as

Re: [LEDE-DEV] [PATCH] ag71xx: Add some unlikely calls + rearange some stuff in hard_start_xmit.

2018-02-14 Thread Rosen Penev
On Tue, Feb 13, 2018 at 11:10 PM, Felix Fietkau wrote: > On 2018-02-13 23:53, Rosen Penev wrote: >> Based on Qualcomm driver. Improves iperf3 throughput by ~20mbps on transmit >> on Archer C7v4. >> >> Signed-off-by: Rosen Penev >> --- >> .../drivers/net/ethernet/atheros/ag71xx/ag71xx_main.c

[LEDE-DEV] [RFC PATCH 1/2] odhcp6c: support multiple additional user prefixes

2018-02-14 Thread Jo-Philipp Wich
Support configuration in the form... list ip6prefix 2001:db8:1234::/64 list ip6prefix 2001:db8:5678::/64 ... to allow specifying multiple additional IPv6 prefixes. Implements feature request FS#1361. Signed-off-by: Jo-Philipp Wich --- package/network/ipv6/odhcp6c/Makefile|

[LEDE-DEV] [RFC PATCH 2/2] 6in4: support multiple additional user prefixes

2018-02-14 Thread Jo-Philipp Wich
Support configuration in the form... list ip6prefix 2001:db8:1234::/64 list ip6prefix 2001:db8:5678::/64 ... to allow specifying multiple routed IPv6 prefixes. Implements feature request FS#1361. Signed-off-by: Jo-Philipp Wich --- package/network/ipv6/6in4/Makefile | 2 +- packa

Re: [LEDE-DEV] Bug when processing long lines

2018-02-14 Thread Jakub Horák
On 02/13/2018 05:01 PM, John Crispin wrote: >> I found a bug in procd that gets triggered when long lines are printed >> by services whose stdout/stderr are being logged. The bug itself is >> explained in the attached patch. [SNIP] > > Hi Jakub, > > i've just posted and alternative solution. coul

Re: [LEDE-DEV] [PATCH v1 1/1] openssh: disable passwords for openssh server

2018-02-14 Thread Stijn Segers
Yousong Zhou schreef op 14 februari 2018 09:06:11 CET: >On 14 February 2018 at 11:53, Philip Prindeville > wrote: >> >>> On Feb 11, 2018, at 3:54 AM, Yousong Zhou >wrote: >>> >>> On 9 February 2018 at 08:28, Philip Prindeville >>> wrote: From: Philip Prindeville Allowing password

Re: [LEDE-DEV] [PATCH v2] ubox/logread: add re-connect capability

2018-02-14 Thread John Crispin
On 24/11/17 14:06, Zefir Kurtisi wrote: When logd is restarted while 'logread -f' is running, the logread process terminates, which cumbers debugging in different use-cases. This patch adds re-connect functionality to logread. In follow mode, when the ustream to logd is disconnected, instead o

Re: [LEDE-DEV] [PATCH v1 1/1] openssh: disable passwords for openssh server

2018-02-14 Thread Yousong Zhou
On 14 February 2018 at 11:53, Philip Prindeville wrote: > >> On Feb 11, 2018, at 3:54 AM, Yousong Zhou wrote: >> >> On 9 February 2018 at 08:28, Philip Prindeville >> wrote: >>> From: Philip Prindeville >>> >>> Allowing password logins leaves you vulnerable to dictionary >>> attacks. We disabl