Integrates following changes:
- amx-cli: Pseudo terminal not properly closed on exit: O_NONBLOCK flag is kept on stdout (PPW-759) (10c3db73)
- amx-cli: Non root user has full data model access (no ACL checking) (PPW-697) (da5ec547)
- test: Non root user has full data model access (no ACL checking) (PPW-697) (a5e2dab9)
- amx_cli_read_line: show prompt when requested (PPW-782) (96f93242)
References: PPW-782, HOP-10263, PPW-697, PPW-759
Signed-off-by: prplbot <bot@prplfoundation.org>
Integrates following changes:
- ci: enable crosscompilations and unit tests (026e5d63)
- amx-cli: Pseudo terminal not properly closed on exit: O_NONBLOCK flag is kept on stdout (705af96f)
References: PPW-759
Signed-off-by: prplbot <bot@prplfoundation.org>
Integrates following changes:
- common: preserve escape characters in odl print method (4e101371)
- amxo_save: possible NULL pointer dereference when saving date-time values (03a327c4)
- unit-test: saving instances with unique values must save the unique values in the instance header (1586a04a)
- unique-values: unique value parameters must be saved in the instance header (88dd72c1)
- documentation: fix typos in odl.md (dc2a29b6)
- odl-parser: while parsing odl file the next chunk read could overwrite not processed data (923a7ff9)
- unit-test: while parsing odl file the next chunk read could overwrite not processed data (cdf9821b)
- odl-save: incorrect values are saved by generic odl save methods (be4d9318)
- unit-test: incorrect values are saved by generic odl save methods (16b2496c)
- documentation: clarify odl save functionality (64d68d09)
- odl read: odl parser reads incorrect content in large odl files (fab7cf28)
- unit-test: odl parser reads incorrect content in large odl files (9b7e4e33)
- common: update copyright year to 2025 (cd9e4a09)
- ci: enable crosscompilations and unit tests (c9d345a7)
References: PPW-743, PPW-725, PPW-744, PPW-745, PPW-742, PPW-707, PPW-724
Signed-off-by: prplbot <bot@prplfoundation.org>
Integrates following changes:
- amxb_ubus: Can not find mapped objects using amxb_be_who_has_ex (PPW-627) (5fe0593e)
References: PPW-627
Signed-off-by: prplbot <bot@prplfoundation.org>
Integrates following changes:
- mod-ba-cli: object lookup improvement: Object lookup should always be done using full object path (PPW-627) (c6b962d6)
References: PPW-627
Signed-off-by: prplbot <bot@prplfoundation.org>
Integrates:
- bbf17c7: ("amxd_path: add function to get part of path at a certain index PCF-1062", 2025-06-12)
References: PCF-1062
Signed-off-by: Hela Saadani <hela.saadani_ext@softathome.com>
Cause: Some warnings are treated as errors by the compiler.
Solution: Check the return values of the capng_get_caps_process and capng_apply_caps_fd functions.
References: PCF-1684
Signed-off-by: Matthias Franck <matthias.franck@softathome.com>
Integrates:
- d8903fa: ("amxp_subproc: Coverity: Fix Time of check time of use (CID 507123)", 2025-04-25)
- aa26544: ("amxp_dir: Coverity: Fix Time of check time of use (CID 300723)", 2025-04-25)
References: CID 507123, CID 300723
Signed-off-by: ahmed sassi <ahmed.sassi_ext@softathome.com>
Integrates:
- 2d802ce: ("amx-fcgi upload: Coverity: Fix Unchecked return value from library and Time of check time of use (CID-341154, CID-341054)", 2025-04-27)
- 9533b05: ("amx-fcgi upload: Coverity: Fix Unchecked return value from library and Time of check time of use (CID-341061, CID-341120)", 2025-04-27)
- abac9cb: ("amx-fcgi batch: Coverity: Fix Out-of-bounds read (CID-341228)", 2025-04-27)
- 65c0ebf: ("amx-fcgi httpaccess: Coverity: Fix Unchecked return value (CID-341165)", 2025-04-27)
- 19433c2: ("amx-fcgi handle: Coverity: Argument cannot be negative (CID-341294)", 2025-04-27)
References:CID-341054, CID-341061, CID-341120, CID-341154, CID-341165, CID-341228, CID-341294
Signed-off-by: ahmed sassi <ahmed.sassi_ext@softathome.com>
Integrates:
- 51c6ee4: ("libamxo: Parser does not take into consideration a variable call (PPW-459)", 2025-02-24)
References: PPW-459
Signed-off-by: Hela Saadani <hela.saadani_ext@softathome.com>
During the prplOS build configuration phase, we're currently seeing
following warning:
WARNING: Makefile 'package/feeds/feed_amx/mod-amxb-pcb/Makefile' has a dependency on 'libpcb', which does not exist
WARNING: Makefile 'package/feeds/feed_amx/mod-amxb-pcb/Makefile' has a dependency on 'libusermngt', which does not exist
This is happening as mod-amxb-pcb defines a wrong dependency on
non-existent libpcb and libusermngt packages.
Package mod-amxb-pcb impossible to compile without vendor specific
"libpcp" library, that not part of prplOS, so let's fix it by removing
non-buildable package.
References: PCF-1637
Signed-off-by: Nikolai Merinov <n.merinov@inango-systems.com>
During the prplOS build configuration phase, we're currently seeing
following warning:
WARNING: Makefile 'package/feeds/feed_amx/libamxp/Makefile' has a build dependency on 'bison/host', which does not exist
WARNING: Makefile 'package/feeds/feed_amx/libamxp/Makefile' has a build dependency on 'flex/host', which does not exist
This happend as libamxp defines a wrong dependency on non existent
flex/host and bison/host packags.
remove dependencies to non existent flex/host and bison/host package.
OpenWrt provides flex and bison utilities as tools/flex and tools/bison
targets. This tools alwys compiled before start of packages compilation.
There is no way to describe this dependency explicitely in OpenWrt.
References: PCF-1637
Signed-off-by: Nikolai Merinov <n.merinov@inango-systems.com>
During the prplOS build configuration phase, we're currently seeing
following warning:
WARNING: Makefile 'package/feeds/feed_amx/libamxo/Makefile' has a build dependency on 'bison/host', which does not exist
WARNING: Makefile 'package/feeds/feed_amx/libamxo/Makefile' has a build dependency on 'flex/host', which does not exist
This happend as libamxo defines a wrong dependency on non existent
flex/host and bison/host packags.
OpenWrt provides flex and bison utilities as tools/flex and tools/bison
targets. This tools alwys compiled before start of packages compilation.
There is no way to describe this dependency explicitely in OpenWrt.
References: PCF-1637
Signed-off-by: Nikolai Merinov <n.merinov@inango-systems.com>
Introduces the mod-busstats package.
mod-busstats allows to fetch the statistics on usage of the inter-process communication bus connections of a component.
References: PCF-1679
Signed-off-by: Matthias Franck <matthias.franck@softathome.com>
- d5bad5c7c933 ("[CI] Update changelog for release master_v6.7.3")
- 6efded78885c ("Issue: HOP-8358 Performance improvements data model transactions")
- 45a060400d02 ("[CI] Update changelog for release master_v6.7.2")
- 8de3afc2dc63 ("Issue: HOP-8255 Custom action handlers must be used when available in creating pcb reply messages")
- 18239a4ca004 ("[CI] Update changelog for release master_v6.7.1")
- 2502b6555a5b ("Issue: HOP-8255 Custom action handlers must be used when available in creating pcb reply messages")
* HOP-8358: - Improve building reply of add instance
- Skip key verification if no key parameters are changed
- Optimize transactions, avoid double look-ups
- Make it possible to set read-only parameters when using protected mode.
* HOP-8255: When parameter values are replied the value is directly from memory, but when a read handler is set on the parameter that one should be used.
Signed-off-by: Hela Saadani <hela.saadani_ext@softathome.com>
- cf43e3842c55 ("[CI] Update changelog for release master_v5.3.2")
- 77e31399a82c ("Issue: HOP-8354 Fix parameter identation when saving odl files")
- aebd63e5e169 ("[CI] Update changelog for release master_v5.3.1")
- 884dd438d9fd ("Issue: HOP-8233 Cache parsed mib expressions")
* HOP-8354: Adds an indentation before parameters when saving odl files
* HOP-8233: Whenever the mibs are applied to the data model, their expression is re-parsed.
For components such as gmap-server that rely heavily on dynamically changing mibs,
this is an extra needless cost that may be optimized by caching the parsed expression.
Signed-off-by: Hela Saadani <hela.saadani_ext@softathome.com>
- b398887391f3 ("[CI] Update changelog for release master_v2.7.0")
- e88416196aae ("Issue: HOP-8351 Avoid variant copies")
Add a function that takes ownership of the variant data for deferred calls.
The variant data must be freed when the deferred call has been executed or when the queued deferred call is removed from the list.
Signed-off-by: Hela Saadani <hela.saadani_ext@softathome.com>
- b67bd98880f1 ("[CI] Update changelog for release master_v3.8.2")
- 88d148fd32c7 ("Issue: HOP-8351 Avoid variant copies")
Adds a function that takes ownership of the variant data for deferred calls.
The variant data must be freed when the deferred call has been executed or when the queued deferred call is removed from the list.
Signed-off-by: Hela Saadani <hela.saadani_ext@softathome.com>
in commit fa710078632f ("[CI] Update autogenerated files")
in commit 092b0e775568 ("baf: fix libcap-ng issues on various filesystems")
in commit af97038c00d8 ("ci: use new gitlab-ci templates")
in commit 4fafa9751b54 ("baf: introduce the baf.yml file")
in commit d33cba16a6bd ("Allow forcing components to run as root (PPW-185)")
References: PPW-185, PPW-74, PCF-1411, PCF-1456
Signed-off-by: Hela Saadani <hela.saadani_ext@softathome.com>
- ddd0af980d88 ("[CI] Update changelog for release master_v4.11.8")
- ea8a01b78bac ("Issue: HOP-8243 [Amxb] Always log bus timeouts to syslog")
A logging function can be set in lib amxb, if this is done all the amxb calls involving bus access will be logged using this function.
In order to always log bus timeouts , use syslog instead of the custom logging function when a timeout has occured. This increases visibility of bus timeouts.
Signed-off-by: Hela Saadani <hela.saadani_ext@softathome.com>
Commit 3dc4681f9b ("Integrating libamxp to master_v2.1.1") added
handling of subprocess capabilities via libcap-ng, which on targets
utilizing ext4 filesystem needs EXT4_FS_SECURITY kernel config symbol
enabled for proper support of extended filesystem attributes via
fsetxattr():
amxp_subproc_start()
`-amxp_subproc_vstart()
`-amxp_subproc_exec_child()
`-amxp_subproc_set_capabilities()
`-capng_apply_caps_fd()
`-fsetxattr()
open("/usr/sbin/unbound", O_RDWR|O_LARGEFILE) = 3
...
fsetxattr(3, "security.capability", "\1\0\0\2\0\0\0\0*$\0\200\0\0\0\0\0\0\0", 20, 0) = -1 EOPNOTSUPP (Not supported)
This failure then leads to missing CAP_NET_BIND_SERVICE capability and thus
unbound can't start:
[1726337363] unbound[30984:0] error: can't bind socket: Permission denied for 0.0.0.0 port 53
[1726337363] unbound[30984:0] error: can't bind socket: Permission denied for :: port 53
[1726337363] unbound[30984:0] fatal error: could not open ports
...
tr181-dns: dns - [i]Started Unbound (1 times) - (start_unbound@modunbound_main.c:455)
tr181-dns: dns - [i]wait for wait:done - (start_unbound@modunbound_main.c:457)
tr181-dns: dns - [x]Unbound stopped! - (unbound_stopped@modunbound_main.c:373)
That was fixed in commit 995891f8ca ("libamxrt: fix libcap-ng issues
on ext4 by enabling EXT4_FS_SECURITY").
Lately it was found out, that on some targets, like RPI the same issue
appeared again. It was found out, that it was due to the fact, that RPI
is using f2fs based rootfs_data overlay, because procd/fstools creates
f2fs based rootfs_data overlays if the available storage space is bigger
then 100MiB, in other cases its going to use ext4 filesystem.
So lets fix it for good for all the targets supported by underlying
OpenWrt system, by selecting the corresponding KERNEL_*_FS_SECURITY
config symbols. Unfortunatelly for f2fs we can't use target's specific
USES_F2FS as its not available, but we could probably use mkf2fs for
that purpose as every target seems to include it, so it should work.
Cc: stable-3.1
Fixes: PCF-1456
References: PCF-1411, PPW-74
Fixes: 3dc4681f9b ("Integrating libamxp to master_v2.1.1")
Signed-off-by: Petr Štetiar <petr.stetiar@prplfoundation.org>
(cherry picked from commit fcf51b9865)
Issue: HOP-8130 [libamxp]Memory leak can occur when signal can not be emitted
Issue: NET-6400 [AMX] Slots callback functions are called multiple times
Signed-off-by: sahbot <sahbot@softathome.com>
GitOrigin-RevId: 9d1f4b84b7ffd2912202050daef6d521b41410f6
Issue: HGWPR-32571 option p busybox not available
Signed-off-by: sahbot <sahbot@softathome.com>
GitOrigin-RevId: 7e240cf097bc725d015752ad2221751a6ca346fb
Issue: NET-6400 [AMX] Slots callback functions are called multiple times
Signed-off-by: sahbot <sahbot@softathome.com>
GitOrigin-RevId: d125f27086dd61a341cbd8a9f5db3f64437e38c5
Issue: HOP-8050 [ubusd] handle large messages - part 2: Fragment messages
Issue: HOP-8094 Too many or wrong events are send over bus systems
Signed-off-by: sahbot <sahbot@softathome.com>
GitOrigin-RevId: 661308edc0814ebc6da85c1c8fcb6696f13c5d48
Issue: HOP-8094 Too many or wrong events are send over bus systems
Signed-off-by: sahbot <sahbot@softathome.com>
GitOrigin-RevId: bfad57541d46e750337ebe631ea487da4518df7a
Issue: HOP-7910 [device] remove the debug information for the whole DM [fix]
Signed-off-by: sahbot <sahbot@softathome.com>
GitOrigin-RevId: c4ef0612f18277784b33a9b43403fbac12b9659e
Issue: HOP-7728 [LCM] The first DU instance gets renamed (but not in dm)
Issue: HOP-7820 Optimizations in ambiorix libraries
Signed-off-by: sahbot <sahbot@softathome.com>
GitOrigin-RevId: 12278f0689b3b1791626960a4b888819c5fc25e6
Issue: HOP-7728 [LCM] The first DU instance gets renamed (but not in dm)
Signed-off-by: sahbot <sahbot@softathome.com>
GitOrigin-RevId: 63065cb58f4061c4e9e11f7483d044981c833075
Issue: HOP-5920 Add support for read-only objects in a local datamodel [new]
Signed-off-by: sahbot <sahbot@softathome.com>
GitOrigin-RevId: ca6fcf9e303bedd6c0f7b37b75c8d5bd3a6be389
# WARNING: Automatically generated file using BAF (Build system Agnostic File) tooling
# WARNING: You should contribute changes to https://gitlab.com/prpl-foundation/components/ambiorix/applications/acl-manager/-/blob/main/baf.yml instead
include$(TOPDIR)/rules.mk
PKG_NAME:=acl-manager
PKG_VERSION:=v0.7.1
PKG_VERSION:=v0.7.2
SHORT_DESCRIPTION:=The ACL manager monitors ACL directory and merges ACL files
@@ -10,11 +10,23 @@ menu "Select libamxrt build options"
config SAH_LIB_AMXRT
bool "Build libamxrt"
default y
select KERNEL_EXT4_FS_SECURITY if USES_EXT4 || PACKAGE_kmod-fs-ext4
select KERNEL_JFFS2_FS_SECURITY if USES_JFFS2 || USES_JFFS2_NAND
select KERNEL_UBIFS_FS_SECURITY if USES_UBIFS
select KERNEL_F2FS_FS_SECURITY if PACKAGE_mkf2fs
config SAH_AMXRT_RWDATAPATH
string "Persistent storage location"
default "/etc/config"
config FORCE_RUNNING_AS_ROOT
bool "INSECURE: This options forces ambiorix components to run as the root user, even if they request to run as a different user"
default y
config REMOVE_CAPS_ODLS
bool "INSECURE: This option removes all the capability ODLs (*_caps.odl) from /etc/amx and subdirectories during first boot. This will also force all components to run as root"
# WARNING: Automatically generated file using BAF (Build system Agnostic File) tooling
# WARNING: You should contribute changes to https://gitlab.com/prpl-foundation/components/ambiorix/modules/amxb_backends/amxb_ubus/-/blob/main/baf.yml instead
# WARNING: Automatically generated file using BAF (Build system Agnostic File) tooling
# WARNING: You should contribute changes to https://gitlab.com/prpl-foundation/components/ambiorix/modules/amx_cli/mod-ba-cli/-/blob/main/baf.yml instead
include$(TOPDIR)/rules.mk
PKG_NAME:=mod-ba-cli
PKG_VERSION:=v0.13.1
PKG_VERSION:=v0.14.2
SHORT_DESCRIPTION:=Bus Agnostic Command Line Interface
PKG_MAINTAINER:=Soft At Home <support.opensource@softathome.com>
PKG_LICENSE:=BSD-2-Clause-Patent
PKG_LICENSE_FILES:=LICENSE
Reference in New Issue
Block a user
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
