Integrates following changes:
- subscription: Add remote subscription index vs. named test [fix] (3b384f41)
- subscription: Add remote subscription index vs. named test [fix] (a9fd8124)
- [dmproxy][amx timeouts] Replace synchronous describe call from dmproxy (6d71b1df)
- refactor: rename amxb_subscription_new_v2 to amxb_subscription_new_no_check (28ceb438)
- docs: enhance subscription API documentation and add internal code comments (64104f5a)
References: PPW-1048
Signed-off-by: prplbot <bot@prplfoundation.org>
Integrates following changes:
- revert: protected access can change read-only parameters (631ebb41)
- fix: ensure unique keys in GSDM (82a0f26b)
- libamxd: fix index search for object lookup (de8557fb)
- fix: ensure unique keys in GSDM (7e699ce7)
- unit test: when creating a new instance unique values are not taken into account to validate the new instance (0389b42d)
- instance creation: when creating a new instance unique values are not taken into account to validate the new instance (a724ecd0)
- documentation: fix typos in header docs (8aa09c24)
- dm-transaction: When adding and deleting an object in the same transaction a seg-fault occurs (b1ba037b)
- dm-transaction: add unit-test for add-inst transactions (da080fb2)
- libamxd: Possible memory leak in amxd_build_key_expr_string (b510d011)
- unit-test: possible memory leak in amxd_build_key_expr_string (7a116cfb)
- unique-values: uniqueness is only considered when the value is not the empty string (3a54e16f)
- unit-test: uniqueness is only considered when the value is not the empty string (3e9ea05f)
- libamxd: key parameters can be modified after they are verified (ccc51072)
- unit-tests: key parameters can be modified after they are verified (d26b9d68)
- regression: when setting a parameter to the same value, validation is done (28a3b23c)
References: PPW-731, PPW-725, PPW-724, PPW-727, PPW-723, PPW-722, PPW-740, PPW-730, PPW-721, PPW-741
Signed-off-by: prplbot <bot@prplfoundation.org>
Integrates following changes:
- ci: include the ci templates (b5491a49)
- baf: introduce the baf.yml file (00f4a557)
- ci: enable crosscompilations and unit tests (1382fd9e)
- ci: baf: update autogenerated files (71b7f3ca)
- PROVISORY: ci: disable unit tests (599bffaf)
- amxrt: library routine to have procd based service monitoring for prplware (51131fe0)
References: PCF-1990
Signed-off-by: prplbot <bot@prplfoundation.org>
Integrates following changes:
- libamxc: type ID is defined for float variant, but not implemented (0d09fddf)
- odl-parser: fix handling of escape characters in strings (fddd204a)
- amxc_set: Add function to check if set is emtpy (fc3dea45)
- amxc_set_to_string: potential buffer overrun (e74bee64)
- amxc_set_to_string: optimize set to_string operation (316c8685)
- amxc_set: add mutual difference operation (3aa4e225)
- test amxc_set: add amxc_set_mutual_difference unit tests (913f9130)
- doc: Update and improve variant type documentation (e80fcf37)
- cli: output uses lexicographical sorting instead of expected natural sorting (ac074296)
- test: output uses lexicographical sorting instead of expected natural sorting (8b86bb5a)
- variant: add a function to retrieve the path of a variant in a composite variant (1fb30558)
- common: update copyright year to 2025 (21dc829e)
References: PPW-709, PPW-712, PPW-713, PPW-708, PPW-781, PPW-710, PPW-705, PPW-711, PPW-707
Signed-off-by: prplbot <bot@prplfoundation.org>
Integrates following changes:
- ci: enable crosscompilations and unit tests (51cb5e94)
- PROVISORY: ci: disable unit tests (d69013b6)
- add API to monitor search path subscriptions on the client side (afd20b10)
References: PPW-746
Signed-off-by: prplbot <bot@prplfoundation.org>
Integrates following changes:
- fix: add API to monitor search path subscriptions on the client side (27beb394)
- fix: re-add verify flag for backwards compatibility (5a6b875f)
- amxp-subproc: fail in amxp_subproc_vstart may lead to blocked signals (69ab9f14)
- amxp_subproc: [overlayfs removal] capabilities dropped on subprocess execution (4e49ad0d)
- amxp-promise: add a promise API for synchronizing program execution in some concurrent asynchronous I/O (575a5043)
- unit-test: add a promise API for synchronizing program execution in some concurrent asynchronous I/O (529b9b6b)
- libamxp-doc: implement abstraction layer for asynchronous and synchronous operations with promises (b1b03771)
- chained-promise: when a chained promise is canceled the wrong private data is passed (d3296a76)
- chained-promise: when a chained promise is canceled the cancel order is incorrect. (9d16f87b)
References: PPW-783, PPW-749, PPW-784, PPW-785, PPW-750, PPW-746, PPW-748
Signed-off-by: prplbot <bot@prplfoundation.org>
Integrates:
- libamxo: Update documentation, add instruction how to use FD type with
RPC and event
Implements: PCF-2034
Signed-off-by: Anton Chigrin <a.chigrin@inango-systems.com>
Integrates following changes:
- ci: enable crosscompilations and unit tests (2d739bf6)
- amx-cli: Pseudo terminal not properly closed on exit: O_NONBLOCK flag is kept on stdout (62a2c537)
References: PPW-759
Signed-off-by: prplbot <bot@prplfoundation.org>
Integrates following changes:
- amx-cli: Pseudo terminal not properly closed on exit: O_NONBLOCK flag is kept on stdout (PPW-759) (6720fe10)
- amx-cli: Non root user has full data model access (no ACL checking) (PPW-697) (a1006eb9)
- test: Non root user has full data model access (no ACL checking) (PPW-697) (0c02c4a9)
- amx_cli_read_line: show prompt when requested (PPW-782) (34c79133)
References: PPW-697, PPW-759, PPW-782, HOP-10263
Signed-off-by: prplbot <bot@prplfoundation.org>
Integrates following changes:
- ci: enable crosscompilations and unit tests (338a6c91)
- The odl print method is stripping all remaining escape chars "\" (PPW-707) (98078670)
- amxo_save: Possible NULL pointer dereference when saving date-time values (PPW-742) (444322f7)
- unit-test: Saving instances with unique values must save the unique values in the instance header. (PPW-724) (a9ad4235)
- unique-values: Unique value parameters must be saved in the instance header. (PPW-724) (f72ab7a5)
- Documentation: Fix typos in the documentation (PPW-725) (314ed027)
- odl-parser: While parsing odl file the next chunk read could overwrite not processed data (PPW-743) (89c096f2)
- unit-test: While parsing odl file the next chunk read could overwrite not processed data (PPW-743) (bfbe007a)
- odl-save: Incorrect values are saved by generic odl save methods (PPW-744) (b17c8558)
- unit-test: Incorrect values are saved by generic odl save methods (PPW-744) (d237f191)
- doc: Clarify save functionality (PPW-744) (252b104d)
- odl read: odl parser reads incorrect content in large odl files (PPW-745) (921dd747)
- unit-test: odl parser reads incorrect content in large odl files (PPW-745) (496f75bd)
References: PPW-707, PPW-724, PPW-744, PPW-745, PPW-742, PPW-725, PPW-743
Signed-off-by: prplbot <bot@prplfoundation.org>
Integrates following changes:
- uspagent: No response from the agent after sending Del message request with an invalid Object (a6af6caa)
References: PPW-695
Signed-off-by: prplbot <bot@prplfoundation.org>
Integrates following changes:
- ci: enable crosscompilations and unit tests (dd4bcd09)
- amxb_ubus: Can not find mapped objects using amxb_be_who_has_ex (PPW-627) (8d219052)
References: PPW-627
Signed-off-by: prplbot <bot@prplfoundation.org>
Integrates following changes:
- ci: enable crosscompilations and unit tests (09f968ce)
- PROVISORY: ci: disable unit tests (545592db)
- mod-ba-cli: object lookup improvement: Object lookup should always be done using full object path (PPW-627) (ff36059f)
References: PPW-627
Signed-off-by: prplbot <bot@prplfoundation.org>
Integrates:
- bbf17c7: ("amxd_path: add function to get part of path at a certain index PCF-1062", 2025-06-12)
References: PCF-1062
Signed-off-by: Hela Saadani <hela.saadani_ext@softathome.com>
Cause: Some warnings are treated as errors by the compiler.
Solution: Check the return values of the capng_get_caps_process and capng_apply_caps_fd functions.
References: PCF-1684
Signed-off-by: Matthias Franck <matthias.franck@softathome.com>
Integrates:
- d8903fa: ("amxp_subproc: Coverity: Fix Time of check time of use (CID 507123)", 2025-04-25)
- aa26544: ("amxp_dir: Coverity: Fix Time of check time of use (CID 300723)", 2025-04-25)
References: CID 507123, CID 300723
Signed-off-by: ahmed sassi <ahmed.sassi_ext@softathome.com>
Integrates:
- 2d802ce: ("amx-fcgi upload: Coverity: Fix Unchecked return value from library and Time of check time of use (CID-341154, CID-341054)", 2025-04-27)
- 9533b05: ("amx-fcgi upload: Coverity: Fix Unchecked return value from library and Time of check time of use (CID-341061, CID-341120)", 2025-04-27)
- abac9cb: ("amx-fcgi batch: Coverity: Fix Out-of-bounds read (CID-341228)", 2025-04-27)
- 65c0ebf: ("amx-fcgi httpaccess: Coverity: Fix Unchecked return value (CID-341165)", 2025-04-27)
- 19433c2: ("amx-fcgi handle: Coverity: Argument cannot be negative (CID-341294)", 2025-04-27)
References:CID-341054, CID-341061, CID-341120, CID-341154, CID-341165, CID-341228, CID-341294
Signed-off-by: ahmed sassi <ahmed.sassi_ext@softathome.com>
Integrates:
- 51c6ee4: ("libamxo: Parser does not take into consideration a variable call (PPW-459)", 2025-02-24)
References: PPW-459
Signed-off-by: Hela Saadani <hela.saadani_ext@softathome.com>
During the prplOS build configuration phase, we're currently seeing
following warning:
WARNING: Makefile 'package/feeds/feed_amx/mod-amxb-pcb/Makefile' has a dependency on 'libpcb', which does not exist
WARNING: Makefile 'package/feeds/feed_amx/mod-amxb-pcb/Makefile' has a dependency on 'libusermngt', which does not exist
This is happening as mod-amxb-pcb defines a wrong dependency on
non-existent libpcb and libusermngt packages.
Package mod-amxb-pcb impossible to compile without vendor specific
"libpcp" library, that not part of prplOS, so let's fix it by removing
non-buildable package.
References: PCF-1637
Signed-off-by: Nikolai Merinov <n.merinov@inango-systems.com>
During the prplOS build configuration phase, we're currently seeing
following warning:
WARNING: Makefile 'package/feeds/feed_amx/libamxp/Makefile' has a build dependency on 'bison/host', which does not exist
WARNING: Makefile 'package/feeds/feed_amx/libamxp/Makefile' has a build dependency on 'flex/host', which does not exist
This happend as libamxp defines a wrong dependency on non existent
flex/host and bison/host packags.
remove dependencies to non existent flex/host and bison/host package.
OpenWrt provides flex and bison utilities as tools/flex and tools/bison
targets. This tools alwys compiled before start of packages compilation.
There is no way to describe this dependency explicitely in OpenWrt.
References: PCF-1637
Signed-off-by: Nikolai Merinov <n.merinov@inango-systems.com>
During the prplOS build configuration phase, we're currently seeing
following warning:
WARNING: Makefile 'package/feeds/feed_amx/libamxo/Makefile' has a build dependency on 'bison/host', which does not exist
WARNING: Makefile 'package/feeds/feed_amx/libamxo/Makefile' has a build dependency on 'flex/host', which does not exist
This happend as libamxo defines a wrong dependency on non existent
flex/host and bison/host packags.
OpenWrt provides flex and bison utilities as tools/flex and tools/bison
targets. This tools alwys compiled before start of packages compilation.
There is no way to describe this dependency explicitely in OpenWrt.
References: PCF-1637
Signed-off-by: Nikolai Merinov <n.merinov@inango-systems.com>
Introduces the mod-busstats package.
mod-busstats allows to fetch the statistics on usage of the inter-process communication bus connections of a component.
References: PCF-1679
Signed-off-by: Matthias Franck <matthias.franck@softathome.com>
- d5bad5c7c933 ("[CI] Update changelog for release master_v6.7.3")
- 6efded78885c ("Issue: HOP-8358 Performance improvements data model transactions")
- 45a060400d02 ("[CI] Update changelog for release master_v6.7.2")
- 8de3afc2dc63 ("Issue: HOP-8255 Custom action handlers must be used when available in creating pcb reply messages")
- 18239a4ca004 ("[CI] Update changelog for release master_v6.7.1")
- 2502b6555a5b ("Issue: HOP-8255 Custom action handlers must be used when available in creating pcb reply messages")
* HOP-8358: - Improve building reply of add instance
- Skip key verification if no key parameters are changed
- Optimize transactions, avoid double look-ups
- Make it possible to set read-only parameters when using protected mode.
* HOP-8255: When parameter values are replied the value is directly from memory, but when a read handler is set on the parameter that one should be used.
Signed-off-by: Hela Saadani <hela.saadani_ext@softathome.com>
- cf43e3842c55 ("[CI] Update changelog for release master_v5.3.2")
- 77e31399a82c ("Issue: HOP-8354 Fix parameter identation when saving odl files")
- aebd63e5e169 ("[CI] Update changelog for release master_v5.3.1")
- 884dd438d9fd ("Issue: HOP-8233 Cache parsed mib expressions")
* HOP-8354: Adds an indentation before parameters when saving odl files
* HOP-8233: Whenever the mibs are applied to the data model, their expression is re-parsed.
For components such as gmap-server that rely heavily on dynamically changing mibs,
this is an extra needless cost that may be optimized by caching the parsed expression.
Signed-off-by: Hela Saadani <hela.saadani_ext@softathome.com>
- b398887391f3 ("[CI] Update changelog for release master_v2.7.0")
- e88416196aae ("Issue: HOP-8351 Avoid variant copies")
Add a function that takes ownership of the variant data for deferred calls.
The variant data must be freed when the deferred call has been executed or when the queued deferred call is removed from the list.
Signed-off-by: Hela Saadani <hela.saadani_ext@softathome.com>
- b67bd98880f1 ("[CI] Update changelog for release master_v3.8.2")
- 88d148fd32c7 ("Issue: HOP-8351 Avoid variant copies")
Adds a function that takes ownership of the variant data for deferred calls.
The variant data must be freed when the deferred call has been executed or when the queued deferred call is removed from the list.
Signed-off-by: Hela Saadani <hela.saadani_ext@softathome.com>
in commit fa710078632f ("[CI] Update autogenerated files")
in commit 092b0e775568 ("baf: fix libcap-ng issues on various filesystems")
in commit af97038c00d8 ("ci: use new gitlab-ci templates")
in commit 4fafa9751b54 ("baf: introduce the baf.yml file")
in commit d33cba16a6bd ("Allow forcing components to run as root (PPW-185)")
References: PPW-185, PPW-74, PCF-1411, PCF-1456
Signed-off-by: Hela Saadani <hela.saadani_ext@softathome.com>
- ddd0af980d88 ("[CI] Update changelog for release master_v4.11.8")
- ea8a01b78bac ("Issue: HOP-8243 [Amxb] Always log bus timeouts to syslog")
A logging function can be set in lib amxb, if this is done all the amxb calls involving bus access will be logged using this function.
In order to always log bus timeouts , use syslog instead of the custom logging function when a timeout has occured. This increases visibility of bus timeouts.
Signed-off-by: Hela Saadani <hela.saadani_ext@softathome.com>
Commit 3dc4681f9b ("Integrating libamxp to master_v2.1.1") added
handling of subprocess capabilities via libcap-ng, which on targets
utilizing ext4 filesystem needs EXT4_FS_SECURITY kernel config symbol
enabled for proper support of extended filesystem attributes via
fsetxattr():
amxp_subproc_start()
`-amxp_subproc_vstart()
`-amxp_subproc_exec_child()
`-amxp_subproc_set_capabilities()
`-capng_apply_caps_fd()
`-fsetxattr()
open("/usr/sbin/unbound", O_RDWR|O_LARGEFILE) = 3
...
fsetxattr(3, "security.capability", "\1\0\0\2\0\0\0\0*$\0\200\0\0\0\0\0\0\0", 20, 0) = -1 EOPNOTSUPP (Not supported)
This failure then leads to missing CAP_NET_BIND_SERVICE capability and thus
unbound can't start:
[1726337363] unbound[30984:0] error: can't bind socket: Permission denied for 0.0.0.0 port 53
[1726337363] unbound[30984:0] error: can't bind socket: Permission denied for :: port 53
[1726337363] unbound[30984:0] fatal error: could not open ports
...
tr181-dns: dns - [i]Started Unbound (1 times) - (start_unbound@modunbound_main.c:455)
tr181-dns: dns - [i]wait for wait:done - (start_unbound@modunbound_main.c:457)
tr181-dns: dns - [x]Unbound stopped! - (unbound_stopped@modunbound_main.c:373)
That was fixed in commit 995891f8ca ("libamxrt: fix libcap-ng issues
on ext4 by enabling EXT4_FS_SECURITY").
Lately it was found out, that on some targets, like RPI the same issue
appeared again. It was found out, that it was due to the fact, that RPI
is using f2fs based rootfs_data overlay, because procd/fstools creates
f2fs based rootfs_data overlays if the available storage space is bigger
then 100MiB, in other cases its going to use ext4 filesystem.
So lets fix it for good for all the targets supported by underlying
OpenWrt system, by selecting the corresponding KERNEL_*_FS_SECURITY
config symbols. Unfortunatelly for f2fs we can't use target's specific
USES_F2FS as its not available, but we could probably use mkf2fs for
that purpose as every target seems to include it, so it should work.
Cc: stable-3.1
Fixes: PCF-1456
References: PCF-1411, PPW-74
Fixes: 3dc4681f9b ("Integrating libamxp to master_v2.1.1")
Signed-off-by: Petr Štetiar <petr.stetiar@prplfoundation.org>
(cherry picked from commit fcf51b9865)
2025-02-06 10:33:21 +01:00
23 changed files with 192 additions and 174 deletions
# WARNING: Automatically generated file using BAF (Build system Agnostic File) tooling
# WARNING: You should contribute changes to https://gitlab.com/prpl-foundation/components/ambiorix/applications/acl-manager/-/blob/main/baf.yml instead
include$(TOPDIR)/rules.mk
PKG_NAME:=acl-manager
PKG_VERSION:=v0.7.1
PKG_VERSION:=v0.9.0
SHORT_DESCRIPTION:=The ACL manager monitors ACL directory and merges ACL files
@@ -10,11 +10,23 @@ menu "Select libamxrt build options"
config SAH_LIB_AMXRT
bool "Build libamxrt"
default y
select KERNEL_EXT4_FS_SECURITY if USES_EXT4 || PACKAGE_kmod-fs-ext4
select KERNEL_JFFS2_FS_SECURITY if USES_JFFS2 || USES_JFFS2_NAND
select KERNEL_UBIFS_FS_SECURITY if USES_UBIFS
select KERNEL_F2FS_FS_SECURITY if PACKAGE_mkf2fs
config SAH_AMXRT_RWDATAPATH
string "Persistent storage location"
default "/etc/config"
config FORCE_RUNNING_AS_ROOT
bool "INSECURE: This options forces ambiorix components to run as the root user, even if they request to run as a different user"
default y
config REMOVE_CAPS_ODLS
bool "INSECURE: This option removes all the capability ODLs (*_caps.odl) from /etc/amx and subdirectories during first boot. This will also force all components to run as root"
# WARNING: Automatically generated file using BAF (Build system Agnostic File) tooling
# WARNING: You should contribute changes to https://gitlab.com/prpl-foundation/components/ambiorix/modules/amxb_backends/amxb_ubus/-/blob/main/baf.yml instead
# WARNING: Automatically generated file using BAF (Build system Agnostic File) tooling
# WARNING: You should contribute changes to https://gitlab.com/prpl-foundation/components/ambiorix/modules/amx_cli/mod-ba-cli/-/blob/main/baf.yml instead
include$(TOPDIR)/rules.mk
PKG_NAME:=mod-ba-cli
PKG_VERSION:=v0.14.0
PKG_VERSION:=v0.16.0
SHORT_DESCRIPTION:=Bus Agnostic Command Line Interface
PKG_MAINTAINER:=Soft At Home <support.opensource@softathome.com>
PKG_LICENSE:=BSD-2-Clause-Patent
PKG_LICENSE_FILES:=LICENSE
Reference in New Issue
Block a user
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
