[PATCH] realtek: don't set L2LEARNING flag in rtl83xx TX header

2022-10-20 Thread Jan Hoffmann
Enabling L2 learning for packets forwarded by the CPU can result in incorrect entries being written to the forwarding table. If a packet that was trapped to the CPU port gets forwarded to another port, the switch incorrectly learns the CPU port instead of the original source port. If the packet

how to add to list of Image files or supplementary files?

2022-10-20 Thread Tim Harvey
Greetings, How would I go about getting a file added to the list of Image Files or Supplementary Files made by the auto-builder? For the octeontx target the kernel should be provided as a downloadable as well. Best Regards, Tim ___ openwrt-devel

[PATCH] bcm53xx: only fixup seama on D-Link DIR-885L

2022-10-20 Thread Linus Walleij
Just one device builds seama images so let's just fix up seama on that one device. I guess the tool errors out but this feels cleaner. Cc: Hauke Mehrtens Cc: Rafał Miłecki Signed-off-by: Linus Walleij --- .../base-files/etc/uci-defaults/09_fix_crc| 24 --- 1 file changed,

Re: CVEs in OpenWrt 22.03

2022-10-20 Thread Dave Taht
I feel your pain, and with the dual provenance of the openwrt kernel (linux X.Y and usually a backport of mac80211) it gets harder. (But other world vendors have it much, much harder, with their frankenkernels) I don't know what guidelines are coming out of this effort (https://openssf.org/ ) is

CVEs in OpenWrt 22.03

2022-10-20 Thread Peter Naulls
Apologies for the obtuseness of the previous email about the squashfs permissions - that's related to the following, but a different topic. I can now say that we're undergoing a security review for our system which is very much based upon OpenWrt 22.03. If you have ever done this, you'll

Removing writable permissions in squashfs images vs overlayfs

2022-10-20 Thread Peter Naulls
Yes, I know. Bear with me. Laugh if you must. # ls -l /rom/ ... drwxr-xr-x4 root root98 Oct 20 13:53 www I'd like to remove the writable bits from the squashfs image - /www is particular concern because of security paranoia. Now I realize that: 1. This is contrary to

Re:

2022-10-20 Thread Christian Marangi
On Thu, Oct 20, 2022 at 05:40:37PM +0200, Christian Marangi wrote: > Merged in master with commit 9f27c33e4ede180ee6d0ad359d12f4849bd342f2. > > Thanks. > > Sorry had to rebase... real commit is edbf9f156f85c90c899a576aff8a9f8aa506d4a5 -- Ansuel

[no subject]

2022-10-20 Thread Christian Marangi
Merged in master with commit 9f27c33e4ede180ee6d0ad359d12f4849bd342f2. Thanks. ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel

Merged: uboot-fritz4040: build FritzBox 7520 variant

2022-10-20 Thread Christian Marangi
Merged. Thank you! ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel

Re: [PATCH] uboot-fritz4040: build FritzBox 7520 variant

2022-10-20 Thread Andre Heider
Anyone? Bueller? On 27/09/2022 13:35, Andre Heider wrote: Gentle Ping! On 15/07/2022 07:59, Andre Heider wrote: Support was added as variant of 7530 (DEVICE_ALT0_*) in: cb6f4be1 "ipq40xx: add support for FRITZ!Box 7520" u-boot has a distinct config for it [0], built it. [0]

[PATCH] mac80211: fix masking nested A-MSDU support for mesh

2022-10-20 Thread Andre Heider
CONFIG_MAC80211_MESH isn't defined for this package, rendering the patch useless. Match protecting the access of sta_info.mesh with the very same define declaring it. Fixes 45109f69a6 "mac80211: fix compile error when mesh is disabled" Signed-off-by: Andre Heider ---