packages/utils/gpsd, branch master

gpsd: run as dedicated 'gpsd' system user

2026-08-07T10:47:42Z

Create a dedicated 'gpsd' system user at package-install time (via USERID) and pin gpsd's built-in privilege-separation identity to it via the SConstruct 'gpsd_user' option. Background: gpsd needs to start as root to open the underlying tty / serial device but then internally setuid()s to a configured unprivileged identity for the rest of its lifetime -- a built-in privilege-separation feature of the daemon. The current package leaves 'gpsd_user' at scons' default 'nobody'. Sharing 'nobody' across daemons is a hardening anti-pattern: a compromise of any one 'nobody'-owned process can trivially interfere with any other, and audit trails become ambiguous. Group choice: gpsd_group is a device-access knob rather than an identity knob -- once gpsd has setuid()d away from root it still needs to open() tty / serial nodes, which OpenWrt exposes as root:dialout mode 0660 (see procd hotplug.json and base-files /etc/group). What actually keeps that access working post-drop is the setgid() target that gpsd_group selects: gpsd calls setgroups(0, NULL) immediately before dropping privileges, so any supplementary groups on the target user are discarded and cannot carry the permission. scons' gpsd_group default is not 'nobody' but 'dialout' (uucp on Gentoo build hosts), so on OpenWrt buildbots the daemon already lands in 'dialout' today. Pin gpsd_group=dialout explicitly so the resulting binary no longer depends on the builder's /etc/gentoo-release: a Gentoo builder would otherwise bake in 'uucp', a group base-files does not ship, and gpsd's getgrnam() fallback silently keeps root's gid in that case. USERID's third field ('dialout=20') still adds the gpsd user to the dialout group in /etc/group. This does not affect the running daemon (setgroups() strips it) but matches Debian's gpsd packaging and lets an operator run gpsdctl / gpsmon as 'gpsd' by hand against device nodes. GID 20 is the value already frozen into base-files. Giving gpsd its own primary user: * confines a hypothetical gpsd RCE (there have been NMEA / UBX parsing bugs historically) to files owned by 'gpsd' rather than to the shared 'nobody' identity; * matches the long-standing Debian gpsd packaging convention (adduser --system gpsd, member of dialout); * is a no-op for correctly-configured installations that never referenced 'nobody' as an intentional identity. No numeric UID is pinned for the primary 'gpsd' user -- dynamic assignment via USERID is sufficient here since no cross-distro NFS/sudoers-style muscle memory depends on a specific number. Bump PKG_RELEASE. Signed-off-by: Michael Pfeifroth

tree-wide: remove redundant test.sh files

2026-07-04T20:42:46Z

Generic version checks were introduced in actions-shared-workflows, making these individual test.sh files obsolete. Signed-off-by: Josef Schlehofer

gpsd: add wrapper script for hotplug/respawn handling

2026-03-02T12:36:30Z

Gpsd needs some time to create its Unix socket after the process starts. The hotplug call in service_started() is triggered too early, before the socket is ready, causing failures in scripts that depend on it. Additionally, when gpsd crashes and procd respawns it, service_started() is not called again, so no hotplug event is emitted on respawn. Therefore scripts listening for gpsd availability miss the STARTED event. This commit ensures the hotplug call waits for the socket to appear, so dependent scripts reliably see the STARTED event, even after respawns. Signed-off-by: Oliver Sedlbauer

gpsd: update to 3.26.1

2025-06-30T11:32:56Z

Release Information: https://gitlab.com/gpsd/gpsd/-/blob/release-3.26.1/NEWS?ref_type=tags Removed the patch to enhance ncurses6 detection (upstreamed in the release) - 0002-ncurses6_detection.patch Signed-off-by: Aleks Mariusz

gpsd: migrate option device to a list devices

2025-02-28T07:13:00Z

More than one device can be added to the gpsd at startup. Currently the gpsd service start script in OpenWrt treats this as an option with only one value. To allow multiple devices to be specified, the uci 'option device' must be removed and a new uci 'list devices' is added. This change means that several devices can be specified at gpsd start with the new uci 'list devices' configuration. Running configurations in the field are migrated by a migration script. Signed-off-by: Florian Eckert

gpsd: add readonly option to uci

2025-02-28T07:13:00Z

The 'readonly' option tells the GPSD that it is not allowed to write to the GPS TTY, only reading the NMEA data stream is allowed. This option of the GPSD must be set for my mobile radio device MV31, otherwise the GPSD can not read the NMEA data stream on the GPS TTY because the GPSD blocks during plugin probing. gpsd:PROG: CORE: Probing "Garmin USB binary" driver... gpsd:PROG: CORE: Probe not found "Garmin USB binary" driver... gpsd:PROG: CORE: Probing "GeoStar" driver... gpsd:PROG: Sent GeoStar packet id 0xc1 Signed-off-by: Florian Eckert

gpsd: only add device to procd start call if device option is configured

2025-02-28T07:13:00Z

Signed-off-by: Florian Eckert

gpsd: add hotplug handling

2025-02-28T07:13:00Z

The 'gpsd' offers the possibility to call the script '/etc/gpsd/device-hook' when a GPS source was added or removed via gpsdctl. In addition to the '/etc/gpsd/device-hook' call an event is now triggered too after the 'gpsd' has started. This allows scripts to configurre 'gpsd' receivers. The following events are available for '/etc/hotplug.d/gpsd' scripts: * ACTIVATE via '/etc/gpsd/device-hook' * DEACTIVATE via '/etc/gpsd/device-hook' * STARTED via '/etc/init.d/gpsd' Signed-off-by: Florian Eckert

gpsd: add the possibility to start the gpsd with a different log level

2025-02-28T07:13:00Z

This simplifies the handling of log levels if we need more log information during development. Signed-off-by: Florian Eckert

gpsd: add control socket '/var/run/gpsd.sock' on startup

2025-02-28T07:13:00Z

This change makes it possible to add new gps device without restarting the 'gpsd' service by using the 'gpsdctl' command. Signed-off-by: Florian Eckert