David Oberhollenzer
118df82d67
Cleanup installed bash completions for util-linux
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-14 19:38:31 +01:00
David Oberhollenzer
6e3b2ab4f9
Cleanup shadow-utils installed programs
...
- Remove programs for converting shadow/regular files into each other
- Remove programs for working with group passwords
- Remove batch processing programs
- Remove namespace related programs
- Remove other convoluted group management programs
- Remove password expiry and finger information utilites
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-14 16:23:25 +01:00
David Oberhollenzer
2c394f4246
Bump init version
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-05 21:55:15 +01:00
David Oberhollenzer
5e11afa1f6
Bump tzdb version
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer
3432245e78
Bump OpenSSH version
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer
6c0ec9a4ab
Bump iproute2 version
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer
41aa911d92
Bump ethtool version
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer
0645f44a1f
Fix /lib64 substitution pattern in tc-gcc1
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer
45cc27ca40
Bump binutils version
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer
6ad8ed37f7
Cleanup binutils confgiure flags, add relro, PIC, deterministic ar
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer
1aa829699c
Explicitly disable libquadmath in second stage gcc
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer
544ac03d1f
Allways build libssp_noshared, even for non hardened toolchains
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer
e87a8ec43c
Explicitly turn on size optimizations
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer
cf2e438a45
Bump Raspberry Pi 3 vendor kernel version
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer
35e72a4ae7
Bump Raspberry Pi 3 firmware version
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer
82a00e5a1b
Bump mainline LTS linux version
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer
60f9a68807
Bump file version
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer
81f4f36044
Bump tzdata version
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer
e91029b64e
Bump unbound version
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer
0b5e2ccc38
Bump dnsmasq version
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer
1786c65c4c
Bump init version
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-11-03 19:28:43 +01:00
David Oberhollenzer
d6030cd898
Replace gcc libssp with built musl builtins
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-20 12:52:06 +02:00
David Oberhollenzer
8a7f8ea357
Disable libmpx on the ALIX board
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-20 01:05:41 +02:00
David Oberhollenzer
d06083c96d
Propperly process Linux package targets in deploy function
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-19 21:50:57 +02:00
David Oberhollenzer
073a7b3aa7
Update documentation
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-19 21:50:57 +02:00
David Oberhollenzer
7dd6306b30
cleanup: derive LINUX_CPU from TARGET, merge linux packages
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-19 21:50:57 +02:00
David Oberhollenzer
b5d4ece03d
cleanup: derive MUSL_CPU from TARGET in Musl package
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-19 21:50:57 +02:00
David Oberhollenzer
569f7d5e0c
cleanup: derive OPENSSL_TARGET from TARGET in OpenSSL package
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-19 21:50:57 +02:00
David Oberhollenzer
8e5c6d3a2e
Make toolchain and user space hardening configurable
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-19 21:50:57 +02:00
David Oberhollenzer
69aa1d33e9
Set hardening options for packages with custom build system
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-19 00:18:51 +02:00
David Oberhollenzer
7b0e1f182c
Add hardening flags to autotools based packages
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-17 01:11:02 +02:00
David Oberhollenzer
8063550d4e
Add libc agnostic fortify-headers package
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-17 01:11:02 +02:00
David Oberhollenzer
52933c58c9
Enable hardening flags for stage-1 gcc
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-17 00:52:10 +02:00
David Oberhollenzer
0958272eb3
Export CROSS_COMPILE environment variable for Musl build script
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-17 00:52:10 +02:00
David Oberhollenzer
c16ff53c14
Remove overlay partition setup from release shell scripts
...
The initial ram disk does that for us (with the propper permissions
in the case of Qemu).
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-11 19:02:11 +02:00
David Oberhollenzer
cf60632398
Enable kernel hardening options
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-11 19:02:11 +02:00
David Oberhollenzer
2a1add41e7
Enable stack protection flags in GCC cross compiler
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-11 19:02:11 +02:00
David Oberhollenzer
f1be060f7c
Bump mainline LTS linux version
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-07 16:35:25 +02:00
David Oberhollenzer
edeedb8047
Update documentation
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-07 16:35:25 +02:00
David Oberhollenzer
62345ef7bb
Cleanup nginx user and directory setup
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-07 16:35:25 +02:00
David Oberhollenzer
30cad432bf
Add an Nginx server landing page to the router product
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-07 02:16:28 +02:00
David Oberhollenzer
dcadff7637
Init version rebase
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-07 02:16:28 +02:00
David Oberhollenzer
8d75cb83fd
Add nginx package
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-06 20:32:44 +02:00
David Oberhollenzer
f3861b9df1
Add PCRE package
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-06 17:25:52 +02:00
David Oberhollenzer
a71c45aec0
Fix final image copy in Linux LTS build script
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-06 17:25:52 +02:00
David Oberhollenzer
e7101d5400
Unfuck libtool archives for libnl3
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-06 17:25:52 +02:00
David Oberhollenzer
8ee48e70d2
Add documentation index
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-03 02:04:01 +02:00
David Oberhollenzer
804aad6274
Add writeup on system boot and VFS setup
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-03 01:59:57 +02:00
David Oberhollenzer
86dcb7d8c1
Bump mainline LTS linux version
...
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-01 20:49:03 +02:00
David Oberhollenzer
e61ca9decf
Another overlay mount overhaul
...
- Directly pass the device type to the mount command
- Use the special default type "hwdevice" to wait for a device node
before mounting it
- Initialize the overlay partition from the initrd script
- Do the bind mount setup as document
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
2018-10-01 19:11:12 +02:00