eternalwrt/eternalwrt-mt798x
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
74,924 Commits 7 Branches 35 Tags
master
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Steven Barth d179611006 kernel: fix chainiv crypto modules in 4.3+ kernels 
Signed-off-by: Steven Barth <cyrus@openwrt.org>

SVN-Revision: 48745
 2016-02-19 11:49:03 +00:00
Steven Barth 0c450f1f47 odhcpd: correctly handle netlink congestion case 
Thanks to @ktgeek and @willmo for diagnosing

Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 47514
 2015-11-19 11:49:21 +00:00
Steven Barth baa359f8e4 target: remove nathelpers from default images (legacy) 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 47280
 2015-10-29 15:16:06 +00:00
Steven Barth 6ce1cc3b30 bzip2: extend/fix the Host/Install rule to install libbz2.so files 
It looks like the bzip2 package does not install any shared libs
and has no build rules to install any shared libs.

So, for the host build we're installing the libbz2 shared libs manually
so that other modules can link against them.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

SVN-Revision: 47245
 2015-10-22 13:24:35 +00:00
Steven Barth 8e9196d1cb 6in4: add tunlink option support 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 47189
 2015-10-15 08:56:59 +00:00
Steven Barth 468c1fb320 base-files: revert to default ECN settings 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 47160
 2015-10-07 21:11:24 +00:00
Steven Barth 79494ae8e8 iproute2: adapt coexistence layer to new unified path 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 47081
 2015-10-02 08:24:35 +00:00
Steven Barth d7023fc0bc base-files: sanitize and unify $PATH 
Previously init and hotplug paths were different from console.

Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 47080
 2015-10-02 08:24:32 +00:00
Steven Barth 836d462b10 package: Remove dependencies to kmod-ipv6 
Since r46834, IPv6 support is builtin if selected. Therefor, dependencies
on kmod-ipv6 can no longer be fulfilled, since it is not a module anymore.

Signed-off-by: Arjen de Korte <arjen+openwrt@de-korte.org>

SVN-Revision: 47022
 2015-09-21 21:15:41 +00:00
Steven Barth 3c335bb439 ppp: use more reliable way to set script environment 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46942
 2015-09-15 14:52:47 +00:00
Steven Barth 76ed9f3dbd omcproxy: use 100ms query response interval by default 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46940
 2015-09-15 07:54:55 +00:00
Steven Barth d1f6bd2541 toplevel: fix release name 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46899
 2015-09-13 18:02:54 +00:00
Steven Barth 60a96cfdb7 comgt-ncm: Add possibility to choose PDP context type 
By setting the option pdptype to IP, IPV6 or IPV4V6 the user can
choose the context type between IPv4, IPv6 and dual stack,
respectively. The default setting is dual stack, except if option
ipv6=0 is specified, in which case IPv4 context is the default.
This allows for an out-of-the-box IPv6 support with modems
utilizing NCM-like protocols.

While we are at it, also add commands for Sierra DirectIP modems
(currently untested), which will allow us to drop the separate
comgt-directip package (once tested and verified working).

Signed-off-by: Matti Laakso <malaakso@elisanet.fi>

SVN-Revision: 46844
 2015-09-11 06:46:42 +00:00
Steven Barth 8f24ee6382 uqmi: Add proper IPv6 support 
Use the new --ip-family option to start both IPv4 and IPv6 sessions
by default. Autoconnect can't be used when starting two sessions,
so revert back to using the client IDs and packet data handles for
handling the network connection.

Some modem firmwares do not implement a RA server, therefore by
default use outband IP configuration and static addressing. Some
other firmwares report bogus IP configuration with the WDS get
current settings command. In this case inband configuration with
DHCP/RA can be optionally enabled by setting option dhcp to 1.

Per 3GPP standard a /64 prefix is served to all clients, which is
extended to LAN as specified in RFC 7278.

v2: Restrict the IPv6 gateway route source address
Signed-off-by: Matti Laakso <malaakso@elisanet.fi>

SVN-Revision: 46843
 2015-09-11 06:46:40 +00:00
Steven Barth eb866e413f firewall: Remove src_port from firewall.config to receive dhcpv6 replies 
Seems like my second try was again whitespace broken. Sorry for the noise.

Remove src_port from firewall.config to receive dhcpv6 replies. Fixes #20295.

Signed-off-by: Anselm Eberhardt <a.eberhardt@cygnusnetworks.de>

SVN-Revision: 46842
 2015-09-11 06:46:35 +00:00
Steven Barth 0c8f0186d5 linux: make IPv6 builtin if selected (saves >30KB) 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46834
 2015-09-09 12:20:36 +00:00
Steven Barth 1fb987e3b8 busybox: fix ip applet and netlink behavior 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46833
 2015-09-09 10:38:16 +00:00
Steven Barth e07959cade package: replace ifconfig-usage with ip 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46832
 2015-09-08 17:44:24 +00:00
Steven Barth 579fe7f52a iproute2: improve ip-full coexistence, remove rt_table 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46831
 2015-09-08 17:44:17 +00:00
Steven Barth 00045fe9d0 base-files: add /etc/iproute2/rt_tables, replace ifconfig-usage 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46830
 2015-09-08 17:44:13 +00:00
Steven Barth 899a23227e busybox: improve applets & deprecate ifconfig, route 
added: ip addr, ip route, ip link, traceroute6
removed: hostid, devmem, vconfig, arping
deprecated (to be removed): ifconfig, route

Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46829
 2015-09-08 17:44:10 +00:00
Steven Barth 1b91cd2663 map: be less restrictive when matching lw4over6 prefixes 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46819
 2015-09-08 12:13:29 +00:00
Steven Barth 8a7a939470 dropbear: remove generation and configuration of DSS keys 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46815
 2015-09-08 08:59:40 +00:00
Steven Barth d196b1fc2e Disable telnet in favor of passwordless SSH 
This enables passworldless login for root via SSH whenever no root
password is set (e.g. after reset, flashing without keeping config
or in failsafe) and removes telnet support alltogether.

Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46809
 2015-09-07 19:29:25 +00:00
Steven Barth 7af30b4cef map: ignore insignificant PSID bits 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46804
 2015-09-07 16:21:15 +00:00
Steven Barth 8ac42ac28b odhcpd: fix parsing of host entries without duid 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46803
 2015-09-07 13:31:36 +00:00
Steven Barth 60e786c4cd odhcpd: various bugfixes 
* ra: don't announce as default router if we aren't (regression)
* ra: reduce maximum announced dns lifetimes due to buggy clients
* dhcpv6: fix mac-based lease-matching

Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46802
 2015-09-07 09:49:35 +00:00
Steven Barth 049baba1ef nls.mk: add -rpath-link when needed for NLS support 
When a package links to a shared library that depends on libiconv or
libintl shared libraries, specifying directory pathes to them via -L
switches is not enough, see "man 1 ld" -rpath-link description.

Signed-off-by: Paul Fertser <fercerpav@gmail.com>

SVN-Revision: 46801
 2015-09-07 08:03:34 +00:00
Steven Barth 4b7ba93083 odhcp6c: correctly extend prefix from RAs 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46781
 2015-09-04 06:29:36 +00:00
Steven Barth f96bf30dc6 comgt/umbim/uqmi: enable RFC 7278 for 3g/4g by default 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46780
 2015-09-03 15:53:40 +00:00
Steven Barth 72b4ed113a odhcp6c: add RFC 7278 3gpp IPv6 prefix extension 
Use option extendprefix 1 to enable

Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46779
 2015-09-03 15:53:33 +00:00
Steven Barth fc41846248 dnsmasq: make /tmp/dnsmasq.d and /tmp/hosts preferred over UCI settings 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46770
 2015-09-02 11:49:00 +00:00
Steven Barth a0d06f65ae dropbear: bump to 2015.68 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46769
 2015-09-02 11:48:57 +00:00
Steven Barth 7e009c1598 map: add debug-code for mapcalc 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46763
 2015-09-01 18:48:22 +00:00
Steven Barth 37160e21bb polarssl: bump to 1.3.12 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46762
 2015-09-01 18:48:15 +00:00
Steven Barth 750a344a55 odhcpd: fix incorrect address assignment for DHCPv6 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46761
 2015-09-01 13:31:00 +00:00
Steven Barth 9f67c7fc8a netifd: various updates 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46718
 2015-08-25 06:27:37 +00:00
Steven Barth ab71e84084 omcproxy: fix last commit 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46717
 2015-08-24 08:53:16 +00:00
Steven Barth e81f860bca omcproxy: add new igmpv3 & mldv2 multicast proxy 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46716
 2015-08-24 08:28:11 +00:00
Steven Barth c154130ebd odhcpd: various RA improvements 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46694
 2015-08-20 12:43:45 +00:00
Steven Barth ed53726072 enable strong SSP / Stackprotector on gcc5 
Signed-off-by: Dirk Neukirchen <dirkneukirchen@web.de>

SVN-Revision: 46685
 2015-08-18 09:20:34 +00:00
Steven Barth a6dc587cf6 musl: fix getsubopt function 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46684
 2015-08-18 09:18:40 +00:00
Steven Barth bef52af66f polarssl: Fix build failures due to PKG_NAME != dir name 
Packages that depend on PolarSSL fail to build because polarssl's InstallDev
section never actually gets executed because (prior to this patch) the package
name does not match the subdir the package is in (presumably due to upstream
name change).  As a workaround I have changed the package name back to
polarssl and used a new variable SRC_PKG_NAME for the purposes of downloading
the upstream tarball and creating PKG_BUILD_DIR.

Signed-off-by: Daniel Dickinson <openwrt@daniel.thecshore.com>

SVN-Revision: 46683
 2015-08-18 08:37:38 +00:00
Steven Barth 677f0e3e72 dnsmasq: Bump to dnsmasq2.74 
Bump to dnsmasq2.74 & refresh patches to fix fuzz

Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>

SVN-Revision: 46522
 2015-07-30 08:53:43 +00:00
Steven Barth 9a2132156d odhcp6c: minor fixes 
Better synchronize RA & DHCPv6 events
Accumulate some events to avoid flooding
Restart softwires for address and prefix changes

Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46518
 2015-07-29 06:13:15 +00:00
Steven Barth 6831883100 firewall: fix typo in ESP rule 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46506
 2015-07-27 11:47:20 +00:00
Steven Barth da337e211e mbedtls: package version 2.0, make polarssl compatible 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46484
 2015-07-24 22:26:44 +00:00
Steven Barth bee26ca0de fortify-headers: update to 0.7 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46480
 2015-07-24 13:51:45 +00:00
Steven Barth fefb6758f9 odhcpd: fix RA lifetimes 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46479
 2015-07-24 13:51:43 +00:00
Steven Barth f6abd042c2 firewall: comply with REC-22, REC-24 of RFC 6092 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46478
 2015-07-24 10:00:45 +00:00
Steven Barth 706adb1601 odhcp6c: add option "sourcefilter" to disable source filter 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46408
 2015-07-18 05:44:50 +00:00
Steven Barth 56e7ba4a1e odhcpd: fix last commit 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46393
 2015-07-17 11:09:13 +00:00
Steven Barth 9a977c2b11 odhcpd: fix dhcpv6 relay forwarding 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46392
 2015-07-17 08:47:48 +00:00
Steven Barth f08895d0e9 odhcpd: also unify router and DNS lifetimes 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46376
 2015-07-15 07:38:54 +00:00
Steven Barth d8e082c593 odhcpd: fix RA lifetime calculation 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46375
 2015-07-15 06:57:43 +00:00
Steven Barth a5641a6444 odhcpd: use 65535s as default lifetime and make interval configurable 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46370
 2015-07-14 20:10:46 +00:00
Steven Barth 63ef3540d1 odhcpd: unsolicited unicast RAs + fix NDP-relay 
odhcpd now sends unsolicited RAs also via unicast to known link-local
neighbors. This is an attempt to work-around common smartphone issues
https://code.google.com/p/android/issues/detail?id=32662

Also NDP-relay should now work more reliably now

Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46357
 2015-07-14 09:12:29 +00:00
Steven Barth a06c1c810e odhcp6c: fix some more compatibility issues 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46335
 2015-07-13 21:51:38 +00:00
Steven Barth fab6209f71 odhcp6c: work-around more ISP DHCPv6-PD issues 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46317
 2015-07-13 14:17:38 +00:00
Steven Barth 37c015fe25 scripts/feeds: print the source of packages installed 
Can be helpful in diagnosing unexpected package overlaps between
feeds/core.

Signed-off-by: Karl Palsson <karlp@remake.is>

SVN-Revision: 46255
 2015-07-07 22:32:38 +00:00
Steven Barth e71141ef23 gdb: fix compilation for x86_64 with musl 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46249
 2015-07-07 17:30:08 +00:00
Steven Barth 59f5eefe8c dnsmasq: Add sequential_ip UCI parameter 
When enabled the dnsmasq DHCP server allocates the IP addresses sequentially
starting from the lowest available IP address.

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>

SVN-Revision: 46211
 2015-07-07 08:13:22 +00:00
Steven Barth c5c819c494 dnsmasq: enable extra tracing by default when UCI parameter logqueries is set 
Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>

SVN-Revision: 46210
 2015-07-07 08:13:16 +00:00
Steven Barth f3cacb9e84 uclibc++: link libssp_nonshared only for musl 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46192
 2015-07-06 08:55:28 +00:00
Steven Barth 0abd6ce0ce nf-conntrack: enable netlink events 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46160
 2015-07-02 14:11:15 +00:00
Steven Barth efe03e5fc7 hardening: disable user-space SSP for !musl 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46146
 2015-06-29 16:44:27 +00:00
Steven Barth 6d48dcb8d5 libubox: fix MD5 for musl on big-endian platforms 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46145
 2015-06-29 14:12:38 +00:00
Steven Barth 55fe8b2988 toolchain: only use fortify-headers for musl 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46138
 2015-06-29 06:47:49 +00:00
Steven Barth 9caaed9141 toolchain: binutils: enhance build reproducability 
built toolchain utilities will always operate in deterministic mode:
https://sourceware.org/binutils/docs-2.25/binutils/ar-cmdline.html

Signed-off-by: Dirk Neukirchen <dirkneukirchen@web.de>

SVN-Revision: 46137
 2015-06-29 06:47:42 +00:00
Steven Barth a47a5dd28d elfutils: bump to 0.163 
Bugfix only release.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>

SVN-Revision: 46136
 2015-06-29 06:47:31 +00:00
Steven Barth a742fcaf3b netifd: add mtu6 option to override IPv6 MTU 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46135
 2015-06-29 06:47:19 +00:00
Steven Barth 9bdae8fc1e fortify-headers: fix compatibility with -pedantic 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46122
 2015-06-24 18:52:13 +00:00
Steven Barth a50df0aacf Revert "px5g-standalone: compatibility with fortify-headers" 
This reverts commit 0c912eec6d95805d30133f34165a1c4e7cbb4bec.

SVN-Revision: 46121
 2015-06-24 18:52:10 +00:00
Steven Barth b6d0061fec scripts/feeds: observe -p flag for preferential feeds 
lookup_target was trampling the $feed variable, resulting in the -p flag
no longer preferentially installing from the named feed.

Make sure to use a local variable for this instead.

Signed-off-by: Karl Palsson <karlp@remake.is>

SVN-Revision: 46120
 2015-06-24 10:57:20 +00:00
Steven Barth 6010a1cdb7 hardening: make override variables more intuitive 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46119
 2015-06-24 10:57:14 +00:00
Steven Barth f4767891c0 px5g-standalone: compatibility with fortify-headers 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46118
 2015-06-23 19:57:50 +00:00
Steven Barth 2738526a16 toolchain: add fortify-headers, enable FORTIFY_SOURCE by default 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46117
 2015-06-23 14:38:03 +00:00
Steven Barth 1877bc9d8f gcc/musl: rework SSP-support 
Make musl provide libssp_nonshared.a and make GCC link it unconditionally
if musl is used. This should be a no-op if SSP is disabled and seems to be
the only reliable way of dealing with SSP over all packages due to the mess
that is linkerflags handling in packages.

Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46108
 2015-06-22 10:31:07 +00:00
Steven Barth 933b588e25 uclibc++: link against libssp_nonshared instead of libssp 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46076
 2015-06-20 18:36:52 +00:00
Steven Barth eb73f4aed7 musl: update musl to 2015-06-20 
Fixes a mips-regression and a missing SSP function

Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46075
 2015-06-20 18:36:50 +00:00
Steven Barth 34aeffef08 libpcap: fixup libtool 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46074
 2015-06-20 17:37:28 +00:00
Steven Barth b954c61d96 musl: apply hardening options (e.g. SSP) also to libc itself 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46073
 2015-06-20 17:37:25 +00:00
Steven Barth 565a2940ff package-defaults: remove libssp for musl (redundant) 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46072
 2015-06-20 17:37:22 +00:00
Steven Barth cfdadd3e1d gcc: musl comes with its own SSP, so use it instead of libssp 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46071
 2015-06-20 17:37:20 +00:00
Steven Barth fc5f02410f buildroot: move hardening options into separate file 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46070
 2015-06-20 17:37:18 +00:00
Steven Barth 23633249c8 ppp: honor LDFLAGS 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46068
 2015-06-19 17:07:11 +00:00
Steven Barth 8a9fd81e55 uclibc++: only disable SSP for ppc 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46067
 2015-06-19 14:36:37 +00:00
Steven Barth 38da12f7e4 uclibc++: honor ldflags, disable SSP 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46066
 2015-06-19 14:09:02 +00:00
Steven Barth 4d548dce67 libtool: enable passthrough for SSP options 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46065
 2015-06-19 13:45:48 +00:00
Steven Barth 539d02eb0b iproute2: honor LDFLAGS 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46064
 2015-06-19 13:30:18 +00:00
Steven Barth 3cb3da9556 linux-atm: add PKG_FIXUP 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46037
 2015-06-18 11:10:46 +00:00
Steven Barth feeea1cd28 lua: honor LDFLAGS 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46036
 2015-06-18 10:55:57 +00:00
Steven Barth ca96d1ab3f package.mk: replicate SSP and relro in both CFLAGS and LDFLAGS 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46035
 2015-06-18 10:48:28 +00:00
Steven Barth 2fb09857e1 uclibc: unbreak after enabling SSP 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46034
 2015-06-18 09:49:45 +00:00
Steven Barth 1e08c08e48 libtool: passthrough -fstack-protector* to linker 
on some platforms this is needed for gcc to link libssp

Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46030
 2015-06-18 08:52:33 +00:00
Steven Barth 6e3b087de8 libnl-tiny: honor CFLAGS when linking 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46029
 2015-06-18 08:13:04 +00:00
Steven Barth 19810a5145 hardening: enable regular SSP support by default 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46020
 2015-06-17 13:13:48 +00:00
Steven Barth 6ac38545c9 openssl: disable parallel builds (spurious linking break) 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46005
 2015-06-16 17:28:11 +00:00
Steven Barth f8140c9caf hardening: enable RELRO by default 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46004
 2015-06-16 17:28:05 +00:00
Steven Barth 11489a85cf hardening: enable format security checking by default 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46003
 2015-06-16 17:27:59 +00:00