Integrates:
- 51c6ee4: ("libamxo: Parser does not take into consideration a variable call (PPW-459)", 2025-02-24)
References: PPW-459
Signed-off-by: Hela Saadani <hela.saadani_ext@softathome.com>
During the prplOS build configuration phase, we're currently seeing
following warning:
WARNING: Makefile 'package/feeds/feed_amx/mod-amxb-pcb/Makefile' has a dependency on 'libpcb', which does not exist
WARNING: Makefile 'package/feeds/feed_amx/mod-amxb-pcb/Makefile' has a dependency on 'libusermngt', which does not exist
This is happening as mod-amxb-pcb defines a wrong dependency on
non-existent libpcb and libusermngt packages.
Package mod-amxb-pcb impossible to compile without vendor specific
"libpcp" library, that not part of prplOS, so let's fix it by removing
non-buildable package.
References: PCF-1637
Signed-off-by: Nikolai Merinov <n.merinov@inango-systems.com>
During the prplOS build configuration phase, we're currently seeing
following warning:
WARNING: Makefile 'package/feeds/feed_amx/libamxp/Makefile' has a build dependency on 'bison/host', which does not exist
WARNING: Makefile 'package/feeds/feed_amx/libamxp/Makefile' has a build dependency on 'flex/host', which does not exist
This happend as libamxp defines a wrong dependency on non existent
flex/host and bison/host packags.
remove dependencies to non existent flex/host and bison/host package.
OpenWrt provides flex and bison utilities as tools/flex and tools/bison
targets. This tools alwys compiled before start of packages compilation.
There is no way to describe this dependency explicitely in OpenWrt.
References: PCF-1637
Signed-off-by: Nikolai Merinov <n.merinov@inango-systems.com>
During the prplOS build configuration phase, we're currently seeing
following warning:
WARNING: Makefile 'package/feeds/feed_amx/libamxo/Makefile' has a build dependency on 'bison/host', which does not exist
WARNING: Makefile 'package/feeds/feed_amx/libamxo/Makefile' has a build dependency on 'flex/host', which does not exist
This happend as libamxo defines a wrong dependency on non existent
flex/host and bison/host packags.
OpenWrt provides flex and bison utilities as tools/flex and tools/bison
targets. This tools alwys compiled before start of packages compilation.
There is no way to describe this dependency explicitely in OpenWrt.
References: PCF-1637
Signed-off-by: Nikolai Merinov <n.merinov@inango-systems.com>
Introduces the mod-busstats package.
mod-busstats allows to fetch the statistics on usage of the inter-process communication bus connections of a component.
References: PCF-1679
Signed-off-by: Matthias Franck <matthias.franck@softathome.com>
- d5bad5c7c933 ("[CI] Update changelog for release master_v6.7.3")
- 6efded78885c ("Issue: HOP-8358 Performance improvements data model transactions")
- 45a060400d02 ("[CI] Update changelog for release master_v6.7.2")
- 8de3afc2dc63 ("Issue: HOP-8255 Custom action handlers must be used when available in creating pcb reply messages")
- 18239a4ca004 ("[CI] Update changelog for release master_v6.7.1")
- 2502b6555a5b ("Issue: HOP-8255 Custom action handlers must be used when available in creating pcb reply messages")
* HOP-8358: - Improve building reply of add instance
- Skip key verification if no key parameters are changed
- Optimize transactions, avoid double look-ups
- Make it possible to set read-only parameters when using protected mode.
* HOP-8255: When parameter values are replied the value is directly from memory, but when a read handler is set on the parameter that one should be used.
Signed-off-by: Hela Saadani <hela.saadani_ext@softathome.com>
- cf43e3842c55 ("[CI] Update changelog for release master_v5.3.2")
- 77e31399a82c ("Issue: HOP-8354 Fix parameter identation when saving odl files")
- aebd63e5e169 ("[CI] Update changelog for release master_v5.3.1")
- 884dd438d9fd ("Issue: HOP-8233 Cache parsed mib expressions")
* HOP-8354: Adds an indentation before parameters when saving odl files
* HOP-8233: Whenever the mibs are applied to the data model, their expression is re-parsed.
For components such as gmap-server that rely heavily on dynamically changing mibs,
this is an extra needless cost that may be optimized by caching the parsed expression.
Signed-off-by: Hela Saadani <hela.saadani_ext@softathome.com>
- b398887391f3 ("[CI] Update changelog for release master_v2.7.0")
- e88416196aae ("Issue: HOP-8351 Avoid variant copies")
Add a function that takes ownership of the variant data for deferred calls.
The variant data must be freed when the deferred call has been executed or when the queued deferred call is removed from the list.
Signed-off-by: Hela Saadani <hela.saadani_ext@softathome.com>
- b67bd98880f1 ("[CI] Update changelog for release master_v3.8.2")
- 88d148fd32c7 ("Issue: HOP-8351 Avoid variant copies")
Adds a function that takes ownership of the variant data for deferred calls.
The variant data must be freed when the deferred call has been executed or when the queued deferred call is removed from the list.
Signed-off-by: Hela Saadani <hela.saadani_ext@softathome.com>
in commit fa710078632f ("[CI] Update autogenerated files")
in commit 092b0e775568 ("baf: fix libcap-ng issues on various filesystems")
in commit af97038c00d8 ("ci: use new gitlab-ci templates")
in commit 4fafa9751b54 ("baf: introduce the baf.yml file")
in commit d33cba16a6bd ("Allow forcing components to run as root (PPW-185)")
References: PPW-185, PPW-74, PCF-1411, PCF-1456
Signed-off-by: Hela Saadani <hela.saadani_ext@softathome.com>
- ddd0af980d88 ("[CI] Update changelog for release master_v4.11.8")
- ea8a01b78bac ("Issue: HOP-8243 [Amxb] Always log bus timeouts to syslog")
A logging function can be set in lib amxb, if this is done all the amxb calls involving bus access will be logged using this function.
In order to always log bus timeouts , use syslog instead of the custom logging function when a timeout has occured. This increases visibility of bus timeouts.
Signed-off-by: Hela Saadani <hela.saadani_ext@softathome.com>
Commit 3dc4681f9b ("Integrating libamxp to master_v2.1.1") added
handling of subprocess capabilities via libcap-ng, which on targets
utilizing ext4 filesystem needs EXT4_FS_SECURITY kernel config symbol
enabled for proper support of extended filesystem attributes via
fsetxattr():
amxp_subproc_start()
`-amxp_subproc_vstart()
`-amxp_subproc_exec_child()
`-amxp_subproc_set_capabilities()
`-capng_apply_caps_fd()
`-fsetxattr()
open("/usr/sbin/unbound", O_RDWR|O_LARGEFILE) = 3
...
fsetxattr(3, "security.capability", "\1\0\0\2\0\0\0\0*$\0\200\0\0\0\0\0\0\0", 20, 0) = -1 EOPNOTSUPP (Not supported)
This failure then leads to missing CAP_NET_BIND_SERVICE capability and thus
unbound can't start:
[1726337363] unbound[30984:0] error: can't bind socket: Permission denied for 0.0.0.0 port 53
[1726337363] unbound[30984:0] error: can't bind socket: Permission denied for :: port 53
[1726337363] unbound[30984:0] fatal error: could not open ports
...
tr181-dns: dns - [i]Started Unbound (1 times) - (start_unbound@modunbound_main.c:455)
tr181-dns: dns - [i]wait for wait:done - (start_unbound@modunbound_main.c:457)
tr181-dns: dns - [x]Unbound stopped! - (unbound_stopped@modunbound_main.c:373)
That was fixed in commit 995891f8ca ("libamxrt: fix libcap-ng issues
on ext4 by enabling EXT4_FS_SECURITY").
Lately it was found out, that on some targets, like RPI the same issue
appeared again. It was found out, that it was due to the fact, that RPI
is using f2fs based rootfs_data overlay, because procd/fstools creates
f2fs based rootfs_data overlays if the available storage space is bigger
then 100MiB, in other cases its going to use ext4 filesystem.
So lets fix it for good for all the targets supported by underlying
OpenWrt system, by selecting the corresponding KERNEL_*_FS_SECURITY
config symbols. Unfortunatelly for f2fs we can't use target's specific
USES_F2FS as its not available, but we could probably use mkf2fs for
that purpose as every target seems to include it, so it should work.
Cc: stable-3.1
Fixes: PCF-1456
References: PCF-1411, PPW-74
Fixes: 3dc4681f9b ("Integrating libamxp to master_v2.1.1")
Signed-off-by: Petr Štetiar <petr.stetiar@prplfoundation.org>
(cherry picked from commit fcf51b9865)
Issue: HOP-8130 [libamxp]Memory leak can occur when signal can not be emitted
Issue: NET-6400 [AMX] Slots callback functions are called multiple times
Signed-off-by: sahbot <sahbot@softathome.com>
GitOrigin-RevId: 9d1f4b84b7ffd2912202050daef6d521b41410f6
Issue: HGWPR-32571 option p busybox not available
Signed-off-by: sahbot <sahbot@softathome.com>
GitOrigin-RevId: 7e240cf097bc725d015752ad2221751a6ca346fb
Issue: NET-6400 [AMX] Slots callback functions are called multiple times
Signed-off-by: sahbot <sahbot@softathome.com>
GitOrigin-RevId: d125f27086dd61a341cbd8a9f5db3f64437e38c5
2024-12-10 06:35:35 +00:00
14 changed files with 98 additions and 107 deletions
@@ -10,11 +10,23 @@ menu "Select libamxrt build options"
config SAH_LIB_AMXRT
bool "Build libamxrt"
default y
select KERNEL_EXT4_FS_SECURITY if USES_EXT4 || PACKAGE_kmod-fs-ext4
select KERNEL_JFFS2_FS_SECURITY if USES_JFFS2 || USES_JFFS2_NAND
select KERNEL_UBIFS_FS_SECURITY if USES_UBIFS
select KERNEL_F2FS_FS_SECURITY if PACKAGE_mkf2fs
config SAH_AMXRT_RWDATAPATH
string "Persistent storage location"
default "/etc/config"
config FORCE_RUNNING_AS_ROOT
bool "INSECURE: This options forces ambiorix components to run as the root user, even if they request to run as a different user"
default y
config REMOVE_CAPS_ODLS
bool "INSECURE: This option removes all the capability ODLs (*_caps.odl) from /etc/amx and subdirectories during first boot. This will also force all components to run as root"
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
