Re: [OpenWrt-Devel] ath79 equivalent of disable_smarteee

2020-02-01 Thread Roger Pueyo Centelles
Hi Martin, Adrian, Thanks for the info. The device is advertising EEE capabilities, and so is the adapter on my computer it is connected to: root@computer:~# ethtool --show-eee eth2 EEE Settings for eth2:     EEE status: enabled - active     Tx LPI: disabled     Supported EEE link modes: 

Re: [OpenWrt-Devel] [PATCH procd] instance: Add 'mustjail' attribute

2020-02-01 Thread John Crispin
On 01/02/2020 17:25, Kevin Darbyshire-Bryant wrote: + bool must_jail; can we name this requires_jail ? John ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel

Re: [OpenWrt-Devel] RFI: OpenWRT Upgrade System; ENH,SEC suggestions

2020-02-01 Thread Wes Turner
Thanks for clarifying. How can a user add a usign EdDSA ed25519 key for e.g. a self-hosted package set? https://openwrt.org/docs/guide-user/security/release_signatures links to https://openwrt.org/docs/guide-user/security/keygen which describes how to generate release signing keys with GPG and

Re: [OpenWrt-Devel] ath79 equivalent of disable_smarteee

2020-02-01 Thread Martin Blumenstingl via openwrt-devel
The sender domain has a DMARC Reject/Quarantine policy which disallows sending mailing list messages using the original "From" header. To mitigate this problem, the original message has been wrapped automatically by the mailing list software.--- Begin Message --- Hi Adrian, On Sat, Feb 1, 2020

[OpenWrt-Devel] ath79 equivalent of disable_smarteee

2020-02-01 Thread mail
Hi, in the device support PR for MikroTik RouterBOARD 922UAGS-5HPacD [1] for ath79, we have the following in ar71xx mach files [2]: static struct at803x_platform_data rb922gs_at803x_data = { .disable_smarteee = 1, }; Is there an ath79 equivalent available and necessary? Best Adrian

Re: [OpenWrt-Devel] RFI: OpenWRT Upgrade System; ENH,SEC suggestions

2020-02-01 Thread Jo-Philipp Wich
Hi Wes, > It's definitely an issue that the sha256 checksum check was broken. > But, can someone explain why a person who is MITM'ing ipk downloads > would change the package and not the checksum? the repository index files containing the SHA256 checksums are signed using usign, which is a

[OpenWrt-Devel] RFI: OpenWRT Upgrade System; ENH,SEC suggestions

2020-02-01 Thread Wes Turner
Saw this post and thought I'd forward it along here. https://news.ycombinator.com/item?id=22208557 """ It's definitely an issue that the sha256 checksum check was broken. But, can someone explain why a person who is MITM'ing ipk downloads would change the package and not the checksum? Are there

[OpenWrt-Devel] [PATCH procd] instance: Add 'mustjail' attribute

2020-02-01 Thread Kevin Darbyshire-Bryant
Since commit b44417c instance: provide error feedback if ujail binary is missing, worrying log spam of the form "unable to find /sbin/jail ..." may be encountered. On systems not configured with jail capabilities the lack of jail binary is not an error, whilst on systems with jail capabilities

Re: [OpenWrt-Devel] [PATCH v4] ath79: add support for TP-Link TL-MR6400

2020-02-01 Thread Enrico Mioso
Hello Filip, and all. Thank you very very much for bringing this on. Sorry for my disappearing lately, been a little bit busy moving home. Unfortunately I don't think I have particular findings to reveal regarding stock FW - I probably would run the original firmware and look at console to