Hi John,
On Wed, 2015-08-26 at 20:20 +0200, John Crispin wrote:
Hi,
On 26/08/2015 20:11, Alexey Brodkin wrote:
uClibc-ng is a spin-off of original uClibc, see http://www.uclibc-ng.org/
We try to regularly add changes from uClibc to uClibc-ng.
We even sent patches and bug reports to
First, I promise this is the last reminder of the OpenWrt Summit Session
deadline. :)
I just wanted to remind folks that the deadline for submitting OpenWrt
Summit sessions is this Friday, August 28. We have some great session
submissions but we're still looking for YOUR session submission. If
Add support for Comtrend VR-3026e v1.
The device is almost identical to the Comtrend VR-3025un.
Signed-off-by: Martin Tesar tesar...@gmail.com
---
target/linux/brcm63xx/base-files/etc/diag.sh | 3 +
.../base-files/etc/uci-defaults/02_network | 3 +-
Here is the third version. I hope it will be fine, finally.
Regards,
Martin
___
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
uClibc-ng is a spin-off of original uClibc, see http://www.uclibc-ng.org/
We try to regularly add changes from uClibc to uClibc-ng.
We even sent patches and bug reports to the uClibc mailing list.
The config file is compatible between uClibc-ng 1.0 and uClibc git master.
This might change in the
Hi,
On 26/08/2015 20:11, Alexey Brodkin wrote:
uClibc-ng is a spin-off of original uClibc, see http://www.uclibc-ng.org/
We try to regularly add changes from uClibc to uClibc-ng.
We even sent patches and bug reports to the uClibc mailing list.
The config file is compatible between uClibc-ng
2015-08-26 15:48 GMT+02:00 John Crispin blo...@openwrt.org:
On 26/08/2015 01:00, Etienne CHAMPETIER wrote:
This patch series rework a bit ujail,
and add capabilities support to it
nice
Seccomp filter are very powerful but not totally generic,
each arch can have different set of
Sorry I forgot an rpcd prefix in the subject. This is a patch for rpcd.
___
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
similiar to import from uci cli.
import removes all old configs and import the new config.
example:
ubus call uci import \
'{config: dhcp, values: { srv: { .type: host, .name: srv,
mac: 00:11:22:33:44:55, ip: 192.168.1.2 } } }'
---
uci.c | 152
Add CONFIG_IEEE80211W variable to DRIVER_MAKEOPTS so that 802.11w
support is properly compiled in full variant.
This fixes #20179
Signed-off-by: Janusz Dziemidowicz rrapt...@nails.eu.org
---
package/network/services/hostapd/Makefile | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff
On 26/08/2015 01:00, Etienne CHAMPETIER wrote:
This patch series rework a bit ujail,
and add capabilities support to it
nice
Seccomp filter are very powerful but not totally generic,
each arch can have different set of syscalls,
each libc can use different syscall for the same function,
Hi,
On Wed, Aug 26, 2015 at 7:09 AM, Martin Tesař tesar...@gmail.com wrote:
Hi,
here is an updated patch.
Please send the patch inline like you did the first time (easier to
review and comment on), and:
diff --git a/target/linux/brcm63xx/patches-3.18/999-board_VR-3026e.patch
If there is one or more capabilities in cap.keep,
drop all capabilities not in cap.keep.
Always drop all capabalities in cap.drop
exemple json syntax:
{
cap.keep: [
cap_net_raw
],
cap.drop: []
}
Signed-off-by: Etienne CHAMPETIER champetier.etie...@gmail.com
---
CMakeLists.txt |
Signed-off-by: Etienne CHAMPETIER champetier.etie...@gmail.com
---
jail/elf.c | 14 --
jail/jail.c | 10 --
jail/log.h | 1 +
3 files changed, 1 insertion(+), 24 deletions(-)
diff --git a/jail/elf.c b/jail/elf.c
index c198599..cbb3051 100644
--- a/jail/elf.c
+++
prctl(PR_SET_NO_NEW_PRIVS, 1) is enough, we don't require CAP_SYS_ADMIN
see
https://www.kernel.org/doc/Documentation/prctl/seccomp_filter.txt
https://www.kernel.org/doc/Documentation/prctl/no_new_privs.txt
Signed-off-by: Etienne CHAMPETIER champetier.etie...@gmail.com
---
jail/preload.c | 6
Hi all,
I was wondering why OpenWRT switched to musl -- is it purely because
uclibc hasn't actually maintained their code properly?
One of the things I have noticed since the CC trunk builds I did with
kernel 3.18.11 + uclibc is that the image sizes have ballooned out by a
fair bit.
For
we can now build preload-seccomp, ujail, utrace separately
Signed-off-by: Etienne CHAMPETIER champetier.etie...@gmail.com
---
CMakeLists.txt | 2 ++
1 file changed, 2 insertions(+)
diff --git a/CMakeLists.txt b/CMakeLists.txt
index 6af17a3..805e2ed 100644
--- a/CMakeLists.txt
+++
v3 of my (u)jail work, you can now use separately
namespaces jail, capabilities and seccomp
Openwrt procd Makefile patch v2 is still ok
___
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
-use EXIT_SUCCESS/EXIT_FAILURE (not -1)
-parse every option in main, put them in opts struct
-add CLONE_NEWIPC to the clone() call (it's already compiled in openwrt kernel)
-return the exit status of the jailed process, or the num of the signal that
killed it
-add missing options to usage()
-add
(perload-jail - preload-seccomp)
Signed-off-by: Etienne CHAMPETIER champetier.etie...@gmail.com
---
jail/seccomp.h | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/jail/seccomp.h b/jail/seccomp.h
index 6c585ad..c44a607 100644
--- a/jail/seccomp.h
+++ b/jail/seccomp.h
@@
building a generic jail can be hard,
choosing to drop some capabilities can be easier.
This commit permit to use namespaces, capabilities
and seccomp combined as you like.
Signed-off-by: Etienne CHAMPETIER champetier.etie...@gmail.com
---
jail/jail.c | 76
- it causes issues with qemu versions 2.2
should fix issues with Ubuntu 14.03 LTS (qemu 2.0)
errors are:
Kernel panic - not syncing: Attempted to kill init! exitcode=0x0004
see ticket #16881
Signed-off-by: Dirk Neukirchen dirkneukirc...@web.de
---
target/linux/malta/be/target.mk | 2 +-
22 matches
Mail list logo
