staging/kaloz/package/utils, branch master

build: add hardened builds with PIE (ASLR) support

2018-01-27T15:46:45Z

Introduce a configuration option to build a "hardened" OpenWrt with ASLR PIE support. Add new option PKG_ASLR_PIE to enable Address Space Layout Randomization (ASLR) by building Position Independent Executables (PIE). This new option protects against "return-to-text" attacks. Busybox need a special care, link is done with ld, not gcc, leading to unknown flags. Set BUSYBOX_DEFAULT_PIE instead and disable PKG_ASLR_PIE. If other failing packages were found, PKG_ASLR_PIE:=0 should be added to their Makefiles. Original Work by: Yongkui Han Signed-off-by: Julien Dusser

util-linux: add fstrim support

2018-01-18T07:04:18Z

This PR adds optional fstrim support Signed-off-by: Dirk Brenken

treewide: replace LEDE_GIT with PROJECT_GIT

2018-01-10T20:27:32Z

Remove LEDE_GIT references in favor to the new name-agnostic PROJECT_GIT variable. Signed-off-by: Jo-Philipp Wich

lua: clean up patch fuzz

2018-01-05T09:42:34Z

Refresh patches to tidy up fuzz. No functional changes Signed-off-by: Kevin Darbyshire-Bryant

busybox: clean up patch fuzz

2018-01-05T09:35:51Z

Refresh patches to tidy up fuzz. No functional changes Signed-off-by: Kevin Darbyshire-Bryant

busybox: enable flock by default

2018-01-02T06:51:39Z

This is needed for procd init script protection to work. flock adds 4248 bytes to stripped busybox binary. Signed-off-by: Roman Yeryomin

busybox: backport cve-2017-16544 fix

2018-01-02T06:14:08Z

In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a directory, does not sanitize filenames and results in executing any escape sequence in the terminal. This could potentially result in code execution, arbitrary file writes, or other attacks. Fixes: FS#1181 - CVE-2017-16544: Backport the patch from: https://git.busybox.net/busybox/commit/?id=c3797d40a1c57352192c6106cc0f435e7d9c11e8 https://nvd.nist.gov/vuln/detail/CVE-2017-16544 Signed-off-by: Derek Werthmuller Signed-off-by: John Crispin

busybox: add missing TARGET_CPPFLAGS and TARGET_LDFLAGS

2017-12-28T11:26:23Z

Unconditionally pass TARGET_CPPFLAGS (not passed at all before) and TARGET_LDFLAGS (passed only in certain non-default configuration before the Makefile streamlining). Without these flags, hardening options (PKG_FORTIFY_SOURCE and PKG_RELRO) were not actually applied to busybox. The addition of these flags increases the size of the stripped busybox binary by about 6KB (~4KB with fortify headers, ~2KB with "-znow -zrelro") with the default hardening options PKG_FORTIFY_SOURCE_1 and PKG_RELRO_FULL. Signed-off-by: Matthias Schiffer

busybox: streamline Makefile

2017-12-28T11:24:25Z

Use default Build/Install steps where possible. No binary change in default configuration, so PKG_RELEASE is not incremented. Signed-off-by: Matthias Schiffer

usbmode: update to latest git HEAD

2017-12-24T08:03:01Z

f40f84c support PantechMode d8dc335 support Quanta and Blackberry modes 333e486 fix support for Option modems Signed-off-by: John Crispin