<feed xmlns='http://www.w3.org/2005/Atom'>
<title>mtk-20170518/package/utils/busybox, branch v18.06.1</title>
<subtitle>MTK 20170518 : Mediatek SDK based on OpenWRT Barrier Breaker</subtitle>
<link rel='alternate' type='text/html' href='http://www.chd.sx/cgit/mtk-20170518/'/>
<entry>
<title>busybox: udhcpc: replace udhcpc_no_msg_dontroute patch by upstream fix</title>
<updated>2018-06-21T20:40:54+00:00</updated>
<author>
<name>Hans Dedecker</name>
<email>dedeckeh@gmail.com</email>
</author>
<published>2018-06-21T20:26:18+00:00</published>
<link rel='alternate' type='text/html' href='http://www.chd.sx/cgit/mtk-20170518/commit/?id=2ac5800fd945e41f27954942afa6742c2b6c9781'/>
<id>2ac5800fd945e41f27954942afa6742c2b6c9781</id>
<content type='text'>
Replace 204-udhcpc_no_msg_dontroute patch by the upstream busybox fix
which removes the code which requires the server ID to be on local
network

Signed-off-by: Hans Dedecker &lt;dedeckeh@gmail.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Replace 204-udhcpc_no_msg_dontroute patch by the upstream busybox fix
which removes the code which requires the server ID to be on local
network

Signed-off-by: Hans Dedecker &lt;dedeckeh@gmail.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>cron: add procd listeners for crontabs</title>
<updated>2018-06-18T19:21:55+00:00</updated>
<author>
<name>Paul Spooren</name>
<email>mail@aparcar.org</email>
</author>
<published>2018-06-14T01:21:11+00:00</published>
<link rel='alternate' type='text/html' href='http://www.chd.sx/cgit/mtk-20170518/commit/?id=38eee4da942b450af3893fbf94d7c69c8a240ff1'/>
<id>38eee4da942b450af3893fbf94d7c69c8a240ff1</id>
<content type='text'>
Add procd file listeners to check files in `/etc/crontabs/`.

Also unified a bit the function style.

Signed-off-by: Paul Spooren &lt;mail@aparcar.org&gt;
(cherry picked from commit cbf69fb2adced6096addbe6aeb54c1971c63dbe4)
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Add procd file listeners to check files in `/etc/crontabs/`.

Also unified a bit the function style.

Signed-off-by: Paul Spooren &lt;mail@aparcar.org&gt;
(cherry picked from commit cbf69fb2adced6096addbe6aeb54c1971c63dbe4)
</pre>
</div>
</content>
</entry>
<entry>
<title>busybox: udhcpc: no MSG_DONTROUTE when sending packet</title>
<updated>2018-06-07T19:49:42+00:00</updated>
<author>
<name>Adi Shammout</name>
<email>adi.shammout@outlook.com</email>
</author>
<published>2018-06-06T19:53:24+00:00</published>
<link rel='alternate' type='text/html' href='http://www.chd.sx/cgit/mtk-20170518/commit/?id=9811057ed191a73d1e53aef76fc5e863a152ec06'/>
<id>9811057ed191a73d1e53aef76fc5e863a152ec06</id>
<content type='text'>
This reverts a change made in Sep 2017 [1] which introduced
MSG_DONTROUTE flag to prevent udhcpc from reaching out to servers on a
different subnet. That change violates RFC2131 by forcing fully
configured clients, who got their configurations through an offer
relayed by a DHCP relay, from renewing through a unicast request
directly to the DHCP server, resulting in the client resorting to
boradcasting lease extension requests instead of unicasting them,
further breaking RFC2131.

The problem with MSG_DONTROUTE appears when talking to a properly
configured DHCP server that rejects non-compliant requests. Such server
will reject lease extension attempts sent via broadcast rather than
unicast, as is the case with Finnish ISPs Telia and DNA as well as
Estonian ISP Starman. Once the lease expires without renewal, udhcpc
enters init mode, taking down the interfaces with it, and thus causing
interruption on every lease expiry. On some ISPs (such as the ones
mentioned above) that can be once every 10-20 minutes. The interruptions
appear in the logs as such:
----
udhcpc: sending renew to x.x.x.x
udhcpc: send: Network unreachable
udhcpc: sending renew to 0.0.0.0
udhcpc: sending renew to 0.0.0.0
...
udhcpc: lease lost, entering init state
Interface 'wan' has lost the connection
Interface 'wan' is now down
Network alias 'eth0' link is down
udhcpc: sending select for y.y.y.y
udhcpc: lease of y.y.y.y obtained, lease time 1200
Network alias 'eth0' link is up
Interface 'wan' is now up
----

During lease extension, a fully configured client should be able to
reach out to the server from which it recieved the lease for extension,
regardless in which network it is; that's up to the gateway to find. [2]
This patch ensures that.

[1]
http://lists.busybox.net/pipermail/busybox-cvs/2017-September/037402.html
[2]
https://www.netmanias.com/en/post/techdocs/6000/dhcp-network-protocol/
understanding-dhcp-relay-agents

Signed-off-by: Adi Shammout &lt;adi.shammout@outlook.com&gt;
Signed-off-by: Hans Dedecker &lt;dedeckeh@gmail.com&gt; [PKG_RELEASE increase]
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This reverts a change made in Sep 2017 [1] which introduced
MSG_DONTROUTE flag to prevent udhcpc from reaching out to servers on a
different subnet. That change violates RFC2131 by forcing fully
configured clients, who got their configurations through an offer
relayed by a DHCP relay, from renewing through a unicast request
directly to the DHCP server, resulting in the client resorting to
boradcasting lease extension requests instead of unicasting them,
further breaking RFC2131.

The problem with MSG_DONTROUTE appears when talking to a properly
configured DHCP server that rejects non-compliant requests. Such server
will reject lease extension attempts sent via broadcast rather than
unicast, as is the case with Finnish ISPs Telia and DNA as well as
Estonian ISP Starman. Once the lease expires without renewal, udhcpc
enters init mode, taking down the interfaces with it, and thus causing
interruption on every lease expiry. On some ISPs (such as the ones
mentioned above) that can be once every 10-20 minutes. The interruptions
appear in the logs as such:
----
udhcpc: sending renew to x.x.x.x
udhcpc: send: Network unreachable
udhcpc: sending renew to 0.0.0.0
udhcpc: sending renew to 0.0.0.0
...
udhcpc: lease lost, entering init state
Interface 'wan' has lost the connection
Interface 'wan' is now down
Network alias 'eth0' link is down
udhcpc: sending select for y.y.y.y
udhcpc: lease of y.y.y.y obtained, lease time 1200
Network alias 'eth0' link is up
Interface 'wan' is now up
----

During lease extension, a fully configured client should be able to
reach out to the server from which it recieved the lease for extension,
regardless in which network it is; that's up to the gateway to find. [2]
This patch ensures that.

[1]
http://lists.busybox.net/pipermail/busybox-cvs/2017-September/037402.html
[2]
https://www.netmanias.com/en/post/techdocs/6000/dhcp-network-protocol/
understanding-dhcp-relay-agents

Signed-off-by: Adi Shammout &lt;adi.shammout@outlook.com&gt;
Signed-off-by: Hans Dedecker &lt;dedeckeh@gmail.com&gt; [PKG_RELEASE increase]
</pre>
</div>
</content>
</entry>
<entry>
<title>flock: enable alternatives support</title>
<updated>2018-05-07T07:50:18+00:00</updated>
<author>
<name>Yousong Zhou</name>
<email>yszhou4tech@gmail.com</email>
</author>
<published>2018-05-04T08:47:28+00:00</published>
<link rel='alternate' type='text/html' href='http://www.chd.sx/cgit/mtk-20170518/commit/?id=f87dff8f72097bd1f63b4921055060271eae977c'/>
<id>f87dff8f72097bd1f63b4921055060271eae977c</id>
<content type='text'>
Fixes FS#1510

Signed-off-by: Yousong Zhou &lt;yszhou4tech@gmail.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Fixes FS#1510

Signed-off-by: Yousong Zhou &lt;yszhou4tech@gmail.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>busybox: order alternatives in alphabetical order</title>
<updated>2018-05-07T07:50:18+00:00</updated>
<author>
<name>Yousong Zhou</name>
<email>yszhou4tech@gmail.com</email>
</author>
<published>2018-05-04T08:43:12+00:00</published>
<link rel='alternate' type='text/html' href='http://www.chd.sx/cgit/mtk-20170518/commit/?id=46a2c0d9c565574671e22751ed5c8407f664f103'/>
<id>46a2c0d9c565574671e22751ed5c8407f664f103</id>
<content type='text'>
Signed-off-by: Yousong Zhou &lt;yszhou4tech@gmail.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Signed-off-by: Yousong Zhou &lt;yszhou4tech@gmail.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>busybox: update to 1.28.3</title>
<updated>2018-04-05T20:15:58+00:00</updated>
<author>
<name>Hannu Nyman</name>
<email>hannu.nyman@iki.fi</email>
</author>
<published>2018-04-04T05:22:10+00:00</published>
<link rel='alternate' type='text/html' href='http://www.chd.sx/cgit/mtk-20170518/commit/?id=c089671339b6e14a64675fa05ed6bfe9b71a600c'/>
<id>c089671339b6e14a64675fa05ed6bfe9b71a600c</id>
<content type='text'>
Bug fix release. 1.28.3 has fixes for
* ash and hush (do not leave stray open file destriptors in children),
* cpio (fix for symlink extraction),
* grep ("grep -Fw a" was matching "aa").

Signed-off-by: Hannu Nyman &lt;hannu.nyman@iki.fi&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Bug fix release. 1.28.3 has fixes for
* ash and hush (do not leave stray open file destriptors in children),
* cpio (fix for symlink extraction),
* grep ("grep -Fw a" was matching "aa").

Signed-off-by: Hannu Nyman &lt;hannu.nyman@iki.fi&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>busybox: update to 1.28.2</title>
<updated>2018-04-03T21:26:45+00:00</updated>
<author>
<name>Hannu Nyman</name>
<email>hannu.nyman@iki.fi</email>
</author>
<published>2018-03-27T17:06:38+00:00</published>
<link rel='alternate' type='text/html' href='http://www.chd.sx/cgit/mtk-20170518/commit/?id=d674422a814a4458af35e79587129a161b50a1ff'/>
<id>d674422a814a4458af35e79587129a161b50a1ff</id>
<content type='text'>
Update busybox to 1.28.2, refresh patches and default config.

* modify 230-add_nslookup_lede.patch as opt_complementary was removed
    Also move nslookup_longopts variable declaration to be inside
    the same conditional as the function itself.
* modify 250-date-k-flag.patch to match upstream (opt_complementary)
* remove 600-cve-2017-16544.patch that is upstreamed

Notes about config changes:
* Some applet-specific LONG_OPTIONS config options were removed
* Config help text indentation changed, caused lots of
  text formatting changes for convert_menuconfig.pl
* convert_defaults.pl moved lots of defaults around, summary of
  actual changes below

New applets/features:
---------------------
ARCH
HEXEDIT
MINIPS
NETCAT
NUKE
RESUME
RUN_INIT
SETFATTR

New options:
------------
FEATURE_CATN
FEATURE_CROND_SPECIAL_TIMES
FEATURE_LIBBUSYBOX_STATIC
FEATURE_SETPRIV_CAPABILITIES
FEATURE_SETPRIV_CAPABILITY_NAMES
FEATURE_SETPRIV_DUMP
FEATURE_SH_READ_FRAC
FEATURE_SWAPONOFF_LABEL
FEATURE_VOLUMEID_MINIX
FEATURE_XARGS_SUPPORT_ARGS_FILE
FEATURE_XARGS_SUPPORT_PARALLEL
HUSH_GETOPTS
HUSH_READONLY
HUSH_TIMES

Removed:
--------
FEATURE_HAVE_RPC
MSH

Signed-off-by: Hannu Nyman &lt;hannu.nyman@iki.fi&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Update busybox to 1.28.2, refresh patches and default config.

* modify 230-add_nslookup_lede.patch as opt_complementary was removed
    Also move nslookup_longopts variable declaration to be inside
    the same conditional as the function itself.
* modify 250-date-k-flag.patch to match upstream (opt_complementary)
* remove 600-cve-2017-16544.patch that is upstreamed

Notes about config changes:
* Some applet-specific LONG_OPTIONS config options were removed
* Config help text indentation changed, caused lots of
  text formatting changes for convert_menuconfig.pl
* convert_defaults.pl moved lots of defaults around, summary of
  actual changes below

New applets/features:
---------------------
ARCH
HEXEDIT
MINIPS
NETCAT
NUKE
RESUME
RUN_INIT
SETFATTR

New options:
------------
FEATURE_CATN
FEATURE_CROND_SPECIAL_TIMES
FEATURE_LIBBUSYBOX_STATIC
FEATURE_SETPRIV_CAPABILITIES
FEATURE_SETPRIV_CAPABILITY_NAMES
FEATURE_SETPRIV_DUMP
FEATURE_SH_READ_FRAC
FEATURE_SWAPONOFF_LABEL
FEATURE_VOLUMEID_MINIX
FEATURE_XARGS_SUPPORT_ARGS_FILE
FEATURE_XARGS_SUPPORT_PARALLEL
HUSH_GETOPTS
HUSH_READONLY
HUSH_TIMES

Removed:
--------
FEATURE_HAVE_RPC
MSH

Signed-off-by: Hannu Nyman &lt;hannu.nyman@iki.fi&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>busybox: drop providing virtual package ip</title>
<updated>2018-03-22T20:54:20+00:00</updated>
<author>
<name>Hans Dedecker</name>
<email>dedeckeh@gmail.com</email>
</author>
<published>2018-03-22T20:43:04+00:00</published>
<link rel='alternate' type='text/html' href='http://www.chd.sx/cgit/mtk-20170518/commit/?id=02fba1a181950e8e0b6bfc67e33000a38af82b19'/>
<id>02fba1a181950e8e0b6bfc67e33000a38af82b19</id>
<content type='text'>
Drop providing the virtual package ip by busybox which was added in commit
1cec4d4ef0.

Letting busybox provide the virtual package ip is not optimal for the
following reasons :

	- Applications depending on ip expect either the ip-full or
	  ip-tiny package to be enabled.
	- Busybox ip applet cannot be added or removed at runtime

Signed-off-by: Hans Dedecker &lt;dedeckeh@gmail.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Drop providing the virtual package ip by busybox which was added in commit
1cec4d4ef0.

Letting busybox provide the virtual package ip is not optimal for the
following reasons :

	- Applications depending on ip expect either the ip-full or
	  ip-tiny package to be enabled.
	- Busybox ip applet cannot be added or removed at runtime

Signed-off-by: Hans Dedecker &lt;dedeckeh@gmail.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>busybox: remove i386-specific build flags</title>
<updated>2018-03-12T11:49:03+00:00</updated>
<author>
<name>Matthias Schiffer</name>
<email>mschiffer@universe-factory.net</email>
</author>
<published>2018-03-09T11:19:37+00:00</published>
<link rel='alternate' type='text/html' href='http://www.chd.sx/cgit/mtk-20170518/commit/?id=b8d9a064f08614ac6f6b0ec26eab1450cf8b7544'/>
<id>b8d9a064f08614ac6f6b0ec26eab1450cf8b7544</id>
<content type='text'>
busybox tries to be smart and passes a number of additional flags to the
compiler. Unfortunately, the i386-specific flags break ABI compatiblity
with libc.

Fixes busybox crashes observed on x86-generic with GCC 7.

Signed-off-by: Matthias Schiffer &lt;mschiffer@universe-factory.net&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
busybox tries to be smart and passes a number of additional flags to the
compiler. Unfortunately, the i386-specific flags break ABI compatiblity
with libc.

Fixes busybox crashes observed on x86-generic with GCC 7.

Signed-off-by: Matthias Schiffer &lt;mschiffer@universe-factory.net&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>build: add hardened builds with PIE (ASLR) support</title>
<updated>2018-01-27T15:46:45+00:00</updated>
<author>
<name>Julien Dusser</name>
<email>julien.dusser@free.fr</email>
</author>
<published>2018-01-08T22:47:06+00:00</published>
<link rel='alternate' type='text/html' href='http://www.chd.sx/cgit/mtk-20170518/commit/?id=df0bd42fdeb76c9bc51b816c3df699db123c0024'/>
<id>df0bd42fdeb76c9bc51b816c3df699db123c0024</id>
<content type='text'>
Introduce a configuration option to build a "hardened" OpenWrt with
ASLR PIE support.

Add new option PKG_ASLR_PIE to enable Address Space Layout Randomization (ASLR)
by building Position Independent Executables (PIE). This new option protects
against "return-to-text" attacks.

Busybox need a special care, link is done with ld, not gcc, leading to
unknown flags. Set BUSYBOX_DEFAULT_PIE instead and disable PKG_ASLR_PIE.

If other failing packages were found, PKG_ASLR_PIE:=0 should be added to
their Makefiles.

Original Work by: Yongkui Han &lt;yonhan@cisco.com&gt;
Signed-off-by: Julien Dusser &lt;julien.dusser@free.fr&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Introduce a configuration option to build a "hardened" OpenWrt with
ASLR PIE support.

Add new option PKG_ASLR_PIE to enable Address Space Layout Randomization (ASLR)
by building Position Independent Executables (PIE). This new option protects
against "return-to-text" attacks.

Busybox need a special care, link is done with ld, not gcc, leading to
unknown flags. Set BUSYBOX_DEFAULT_PIE instead and disable PKG_ASLR_PIE.

If other failing packages were found, PKG_ASLR_PIE:=0 should be added to
their Makefiles.

Original Work by: Yongkui Han &lt;yonhan@cisco.com&gt;
Signed-off-by: Julien Dusser &lt;julien.dusser@free.fr&gt;
</pre>
</div>
</content>
</entry>
</feed>
