Re: [PATCH v2 0/7] 22.03 lantiq: add support for x490 Fritzboxes

2022-10-24 Thread Hauke Mehrtens
On 10/23/22 13:19, Torsten Duwe wrote: Hi all, Here is my second attempt for initial FritzBox x490 support. 22.03 now has all the necessary prerequisites, so support can be added according to the rules. The original code snippets were submitted by John Crispin (IIRC), Andreas Böhler and Daniel

Re: how to add to list of Image files or supplementary files?

2022-10-24 Thread Tomasz Maciej Nowak
W dniu 20.10.2022 o 23:04, Tim Harvey pisze: > Greetings, > > How would I go about getting a file added to the list of Image Files > or Supplementary Files made by the auto-builder? > > For the octeontx target the kernel should be provided as a downloadable as > well. I'm not exactly sure, but

Re: SBOM Tool for OpenWRT to feed Dependency Track

2022-10-24 Thread Dave Taht
This work (cleaning up SBOM, clearly identifying CVEs, getting on top of more) sounds like an *ideal* candidate for funding under the NLNET entrust fund: https://nlnet.nl/entrust/ Applications are easy, the amount available per project usually in the range of 30-50k eu, and usually approval is

Re: CVEs in OpenWrt 22.03

2022-10-24 Thread Hauke Mehrtens
On 10/20/22 22:26, Peter Naulls wrote: Apologies for the obtuseness of the previous email about the squashfs permissions - that's related to the following, but a different topic.  I can now say that we're undergoing a security review for our system which is very much based upon OpenWrt

Re: SBOM Tool for OpenWRT to feed Dependency Track

2022-10-24 Thread Hauke Mehrtens
On 10/18/22 16:38, Pfendtner Steffen wrote: Hi, We decided to publish our internal fork of the Timesys SBOM Tool we found on github. You find our version at: https://github.com/ads-tec/sbom-openwrt It takes a complete OpenWRT build tree as input and will generate a SBOM in CycloneDX JSON

Re: Removing writable permissions in squashfs images vs overlayfs

2022-10-24 Thread Peter Naulls
On 10/23/22 23:35, Phillip Lougher wrote: On Thu, Oct 20, 2022 at 6:01 PM Peter Naulls wrote: What you probably want is the following % mksquashfs test test.sqsh -action "chmod(ugo-w)@perm(/ugo+w)" It is, fantastic, thank you. I added to include/image.mk: --- a/include/image.mk +++