summaryrefslogtreecommitdiffstats
path: root/package/ntp
Commit message (Collapse)AuthorAgeFilesLines
* ntp: fix build without libcap and no threadsBaruch Siach2018-10-161-0/+26
| | | | | | | | | | | | | | | When threads support is missing the ntp build system builds the work_fork code. This code added call to set_user_group_ids() that is under HAVE_DROPROOT, which is disabled when libcap is not built. Add a patch fixing that. Fixes: http://autobuild.buildroot.net/results/ab9/ab9ceff1151b8b5e6b9fa77d39c0f9b0cac1a080/ Cc: Artyom Panfilov <apanfilov@spectracom.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* ntp: fix build for no-MMU with libcapBaruch Siach2018-10-131-7/+14
| | | | | | | | | | | | | | | | | | Commit 87d759ced5 (ntp: fix build for no-MMU) added a patch to make MMU dependent code hidden behind HAVE_WORKING_FORK. It turns out that the patch covers too much code. When libcap is enabled we pass --enable-linuxcaps, which in turn enables HAVE_DROPROOT. This adds calls to code that is covered by HAVE_WORKING_FORK. Update the no-MMU fix so that HAVE_WORKING_FORK only covers the no-MMU incompatible routine. Fixes: http://autobuild.buildroot.net/results/c5c/c5cf28bb969fec7c07864cdd094dedfa4d5439d2/ Cc: Artem Panfilov <apanfilov@spectracom.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* ntp: fix build for no-MMUBaruch Siach2018-10-121-0/+22
| | | | | | | | | | | | | | Code rearrange in the latest ntp version exposed code that used to be hidden behind HAVE_WORKING_FORK. Put this code back where it belongs. Fixes: http://autobuild.buildroot.net/results/9f4/9f4710b451df1a60f95ab6503cfb7788ad998a65/ http://autobuild.buildroot.net/results/d0b/d0b20a6c0f37a8b06841afc2764c8aab6ffd27d2/ http://autobuild.buildroot.net/results/85c/85c89f5e9d36915567b8d14b9c99e3720c866577/ Cc: Artem Panfilov <apanfilov@spectracom.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/ntp: fix md5sum.Artyom Panfilov2018-10-111-2/+2
| | | | | Signed-off-by: Artem Panfilov <apanfilov@spectracom.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* package/ntp: security bump to version 4.2.8p12Artyom Panfilov2018-10-102-2/+2
| | | | | | | | | | | | | | | | Release notes: https://www.nwtime.org/network-time-foundation-publishes-ntp-4-2-8p12 Fixed security issues: CVE-2016-1549 / CVE-2018-7170: Sybil vulnerability: ephemeral association attack CVE-2018-12327: The openhost() function used during command-line hostname processing by ntpq and ntpdc can write beyond its buffer limit Signed-off-by: Artem Panfilov <apanfilov@spectracom.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* package/busybox: invert dependency with ntpYann E. MORIN2018-07-081-1/+1
| | | | | Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
* ntp: don't test if the binary exists in the init scriptCarlos Santos2018-04-161-5/+1
| | | | | | | | | | | The test doesn't make sense. It just exits without any error if the binary doesn't exist, which is silly. Replace the DAEMON variable, which was used only once, by the full path of the binary file. Signed-off-by: Carlos Santos <casantos@datacom.ind.br> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* package/ntp: add support for libresslBernd Kuhls2018-04-021-1/+1
| | | | | | | Ntp builds fine with current libressl 2.7.2. Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* ntp: fix build without SSP supportBaruch Siach2018-03-071-2/+2
| | | | | | | | | | | | | | In version 4.2.8p11 ntp changed its configure script build hardening parameter to '--with-hardenfile'. Update the parameter name to avoid -fstack-protector-all when the toolchain does not support this option. Fixes: http://autobuild.buildroot.net/results/60e/60e8b9864932f2cabc7deb43234abe168bd113c5/ http://autobuild.buildroot.net/results/592/592db6836817bb078a2f1146d2ce6241bf7997a3/ http://autobuild.buildroot.net/results/b07/b070fbc66a928888df8d2561dad3632778d55e0d/ Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* ntp: security bump to version 4.2.8p11Baruch Siach2018-03-063-28/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixed or improved security issues: CVE-2016-1549 (fixed in 4.2.8p7; this release adds protection): A malicious authenticated peer can create arbitrarily-many ephemeral associations in order to win the clock selection algorithm CVE-2018-7182: Buffer read overrun leads to undefined behavior and information leak CVE-2018-7170: Multiple authenticated ephemeral associations CVE-2018-7184: Interleaved symmetric mode cannot recover from bad state CVE-2018-7185: Unauthenticated packet can reset authenticated interleaved association CVE-2018-7183: ntpq:decodearr() can write beyond its buffer limit Drop patch #3. libntpq_a_CFLAGS now includes NTP_HARD_CFLAGS via AM_CFLAGS. Add license file hash. Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* ntp: explicitly enable openssl-random when crypto is enabledAdam Duskett2018-02-041-1/+1
| | | | | | | | | If OpenSSL is selected, --enable-openssl-random should be explicitly enabled for consistency with the disable case. [Peter: tweak commit text] Signed-off-by: Adam Duskett <aduskett@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* ntp: does not work with libresslPeter Korsgaard2018-01-081-1/+1
| | | | | | | | | | | | | | | | | | | | | | Fixes #10556 The --with-crypto handling in ntp only works with libopenssl, not with libressl, where it ends up with compilation issues like: ntp_control.c:(.text+0x64): undefined reference to `EVP_MD_CTX_new' ntp_control.c:(.text+0x10c): undefined reference to `EVP_MD_CTX_free' libntpd.a(ntp_crypto.o): In function `bighash': ntp_crypto.c:(.text+0x2e8): undefined reference to `EVP_MD_CTX_new' ntp_crypto.c:(.text+0x328): undefined reference to `EVP_MD_CTX_free' libntpd.a(ntp_crypto.o): In function `crypto_verify': ntp_crypto.c:(.text+0x6cc): undefined reference to `EVP_MD_CTX_new' ntp_crypto.c:(.text+0x710): undefined reference to `EVP_MD_CTX_free' ntp_crypto.c:(.text+0x72c): undefined reference to `EVP_MD_CTX_free' So ensure we only pass --with-crypto when libopenssl is used. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/*/Config.in: fix help text check-package warningsThomas Petazzoni2017-12-181-13/+14
| | | | | | | | | | | | | This commit fixes the warnings reported by check-package on the help text of all package Config.in files, related to the formatting of the help text: should start with a tab, then 2 spaces, then at most 62 characters. The vast majority of warnings fixed were caused by too long lines. A few warnings were related to spaces being used instead of a tab to indent the help text. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* packages: fix trailing spaces and slashYann E. MORIN2017-12-011-1/+1
| | | | | | | | ... as reported by utils/check-package. Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Cc: Adam Duskett <aduskett@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* ntp: no longer require opensslAdam Duskett2017-11-082-3/+8
| | | | | | | 4.2.8p10 no longer requires openssl to compile. Signed-off-by: Adam Duskett <Adamduskett@outlook.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* ntp: enable/disable sntp support depending on BR2_PACKAGE_NTP_SNTPVicente Olivert Riera2017-06-191-0/+6
| | | | | | | | | | | We already have an option for selecting sntp support in ntp that can be chosen from the menuconfig, and ntp's configure script has a --with-sntp option (with its --without counterpart) which can be used for disabling sntp support in ntp. However, we are not using it. This patch will make use of it. Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* ntp: add patch to fix -fPIC issueThomas Petazzoni2017-05-172-0/+24
| | | | | | | | | | | | | | | This commit adds a patch that fixes the build on AArch64 and MIPS of the ntp package, which was caused by some parts of ntp being built without -fPIC. Fixes: [aarch64] http://autobuild.buildroot.net/results/866b1d28595efd8b6becf83d0a64b596538d58b0 [mips] http://autobuild.buildroot.net/results/c2a945855172970736a8ffea9c564f029a023344 Thanks to Romain Naour for the initial analysis. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* ntp: use SPDX short identifier for ntp licenseRahul Bedarkar2017-04-011-1/+1
| | | | | Signed-off-by: Rahul Bedarkar <rahulbedarkar89@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/ntp: fix build for toolchains without sspBernd Kuhls2017-03-251-0/+6
| | | | | | | | | | | | | | | | | ntp defaults to use ssp support http://bk1.ntp.org/ntp-stable/sntp/harden/README by using these flags http://bk1.ntp.org/ntp-stable/sntp/harden/linux If the toolchain lacks SSP support this patch forces ntp to use an empty set of flags: http://bk1.ntp.org/ntp-stable/sntp/harden/default Fixes http://autobuild.buildroot.net/results/1d5/1d58bd8745b22c8eb71fea4c7255d3ace69f6f7a/ Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/ntp: security bump to 4.2.8p10Bernd Kuhls2017-03-222-5/+5
| | | | | | | | | | | | Changed NTP_SITE to https to circumvent "URL transformed to HTTPS due to an HSTS policy" during download. For details about the bugs fixed see: http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities http://www.kb.cert.org/vuls/id/633847 Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* ntp: security bump to verserion 4.2.8p9Adam Duskett2017-02-073-13/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | This version of ntp fixes several vulnerabilities. CVE-2016-9311 CVE-2016-9310 CVE-2016-7427 CVE-2016-7428 CVE-2016-9312 CVE-2016-7431 CVE-2016-7434 CVE-2016-7429 CVE-2016-7426 CVE-2016-7433 http://www.kb.cert.org/vuls/id/633847 In addition, libssl_compat.h is now included in many files, which references openssl/evp.h, openssl/dsa.h, and openssl/rsa.h. Even if a you pass --disable-ssl as a configuration option, these files are now required. As such, I have also added openssl as a dependency, and it is now automatically selected when you select ntp. Signed-off-by: Adam Duskett <aduskett@codeblue.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* ntp: fix missing optional dependenciesJérôme Pouiller2016-11-281-0/+14
| | | | | | | | | | | | | | | | | | | | | | | ntpq and ntpdc may depends on libedit and libcap. $ arm-linux-readelf -d ./usr/bin/ntpdc | grep NEEDED 0x00000001 (NEEDED) Shared library: [libcap.so.2] 0x00000001 (NEEDED) Shared library: [libm.so.6] 0x00000001 (NEEDED) Shared library: [libedit.so.0] 0x00000001 (NEEDED) Shared library: [libncursesw.so.6] 0x00000001 (NEEDED) Shared library: [libssl.so.1.0.0] 0x00000001 (NEEDED) Shared library: [libcrypto.so.1.0.0] 0x00000001 (NEEDED) Shared library: [libpthread.so.0] 0x00000001 (NEEDED) Shared library: [libc.so.6] However, build order with these libraries is not defined. In order to keep things simple, we enforce build order even if ntpq/ntpdc are not selected. Signed-off-by: Jérôme Pouiller <jezz@sysmic.org> [Thomas: use --without-lineeditlibs.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* ntp: disable debuggingVicente Bergas2016-08-071-0/+1
| | | | | | | | | When running ntp it randomly aborts at ntp-4.2.8p8/libntp/recvbuff.c:326 which seems to be a debugging feature. This patch just disables debugging, it does not fix the root cause of the problem. Signed-off-by: Vicente Bergas <vicencb@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* ntp: add support for SHM clocksYugendra Sai Babu Nadupuru2016-07-152-0/+12
| | | | | | | | | | In order for gpsd to work with the new version of ntpd, an enable option must be added to the configure step of ntp that allows for support of SHM clocks to be attached through shared memory. Signed-off-by: Yugendra Sai Babu Nadupuru <yugendra.sai.babu.nadupuru@rockwellcollins.com> Signed-off-by: Matt Weber <matthew.weber@rockwellcollins.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* ntp: security bump to version 4.2.8p8Gustavo Zacarias2016-06-032-4/+4
| | | | | | | | | | | | Fixes: CVE-2016-4957 - Crypto-NAK crash CVE-2016-4953 - Bad authentication demobilizes ephemeral associations CVE-2016-4954 - Processing spoofed server packets CVE-2016-4955 - Autokey association reset CVE-2016-4956 - Broadcast interleave Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* ntp: security bump to version 4.2.8p7Gustavo Zacarias2016-05-022-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes: CVE-2016-1551 - Refclock impersonation vulnerability, AKA: refclock-peering CVE-2016-1549 - Sybil vulnerability: ephemeral association attack, AKA: ntp-sybil - MITIGATION ONLY CVE-2016-2516 - Duplicate IPs on unconfig directives will cause an assertion botch CVE-2016-2517 - Remote configuration trustedkey/requestkey values are not properly validated CVE-2016-2518 - Crafted addpeer with hmode > 7 causes array wraparound with MATCH_ASSOC CVE-2016-2519 - ctl_getitem() return value not always checked CVE-2016-1547 - Validate crypto-NAKs, AKA: nak-dos CVE-2016-1548 - Interleave-pivot - MITIGATION ONLY CVE-2015-7704 - KoD fix: peer associations were broken by the fix for NtpBug2901, AKA: Symmetric active/passive mode is broken CVE-2015-8138 - Zero Origin Timestamp Bypass, AKA: Additional KoD Checks CVE-2016-1550 - Improve NTP security against buffer comparison timing attacks, authdecrypt-timing, AKA: authdecrypt-timing Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* ntp: security bump to version 4.2.8p6Gustavo Zacarias2016-01-202-4/+4
| | | | | | | | | | | | | | | | | | | CVE-2015-7973 - Deja Vu: Replay attack on authenticated broadcast mode CVE-2015-7974 - Skeleton Key: Missing key check allows impersonation between authenticated peers CVE-2015-7975 - nextvar() missing length check CVE-2015-7976 - ntpq saveconfig command allows dangerous characters in filenames CVE-2015-7977 - reslist NULL pointer dereference CVE-2015-7978 - Stack exhaustion in recursive traversal of restriction list CVE-2015-7979 - Off-path Denial of Service (DoS) attack on authenticated broadcast mode CVE-2015-8137 - origin: Zero Origin Timestamp Bypass CVE-2015-8158 - Potential Infinite Loop in ntpq Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* ntp: security bump to version 4.2.8p5Gustavo Zacarias2016-01-082-4/+4
| | | | | | | | | Fixes: CVE-2015-5300 - MITM attacker can force ntpd to make a step larger than the panic threshold. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* ntp: bump to version 4.2.8p4James Knight2015-10-222-4/+4
| | | | | Signed-off-by: James Knight <james.knight@rockwellcollins.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* ntp: add ntptime optionJames Knight2015-10-203-0/+36
| | | | | | | | Allow the `ntptime` utility to be included on a target. [Peter: add comment why AUTORECONF is needed] Signed-off-by: James Knight <james.knight@rockwellcollins.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package: Replace 'echo -n' by 'printf'Maxime Hadjinlian2015-10-041-2/+2
| | | | | | | | | | | | 'echo -n' is not a POSIX construct (no flag support), we shoud use 'printf', especially in init script. This patch was generated by the following command line: git grep -l 'echo -n' -- `git ls-files | grep -v 'patch'` | xargs sed -i 's/echo -n/printf/' Signed-off-by: Maxime Hadjinlian <maxime.hadjinlian@gmail.com> Reviewed-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/ntp: increase pool server count in default configGergely Imreh2015-07-131-0/+2
| | | | | | | | | | | | | To protect agains 1 falsticker NTP server, the client needs to connect to at least 4 servers. Source: http://support.ntp.org/bin/view/Support/SelectingOffsiteNTPServers 5.3.3. Upstream Time Server Quantity Signed-off-by: Gergely Imreh <imrehg@gmail.com> Acked-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* ntp: drop unused POST_PATCH_HOOKS handlingPeter Korsgaard2015-07-061-2/+0
| | | | | | | Now that NTP_PATCH_FIXUPS is gone. Reported-by: Danomi Manchego <danomimanchego123@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* ntpd: drop unneeded uClibc workaround for refclock_pcf.cPeter Korsgaard2015-07-061-4/+0
| | | | | | | | | | | | | | | | | | | | refclock_pcf.c contains code using the tm_gmtoff member of struct tm, which is only available on uClibc if it is built with __UCLIBC_HAS_TM_EXTENSIONS__. This change date back to: commit 7129da009cc72575a84a30c4587bd99f745c49d4 Author: Eric Andersen <andersen@codepoet.org> Date: Sat Jan 18 21:27:22 2003 +0000 Merge a bunch of stuff over from the tuxscreen buildroot, with many updates to make things be more consistant. -Erik But nowadays our uClibc configs DO enable __UCLIBC_HAS_TM_EXTENSIONS__, so it is no longer needed and can be dropped. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* ntp: drop uselss patch fixup which sometimes breaks rebuildDanomi Manchego2015-07-061-1/+0
| | | | | | | | | | | Drop sed line which no longer changes anything as upstream has changed to use strrchr. Worse, it bumps each ntpd/*.c file's modification time, which sometimes triggers a strange dependency path causing the makefile to attempt to run the ntpd keyword-gen app, which fails, because it's been cross-compiled. Signed-off-by: Danomi Manchego <danomimanchego123@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* ntp: security bump to version 4.2.8p3Gustavo Zacarias2015-07-022-3/+5
| | | | | | | | | Fixes: CVE-2015-5146 - ntpd control message crash: Crafted NUL-byte in configuration directive. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* ntp: install after busyboxBaruch Siach2015-05-191-1/+1
| | | | | | | | Make sure that ntp installs after busybox so that it overrides the busybox provided ntpd applet. Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* packages: remove non-IPv6 dependencies and tweaksGustavo Zacarias2015-04-221-4/+0
| | | | | | | | Now that IPv6 is mandatory remove package dependencies and conditionals for it. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* ntp: security bump to version 4.2.8p2Gustavo Zacarias2015-04-072-3/+3
| | | | | | | | | | | Fixes: CVE-2015-1798 - ntpd accepts unauthenticated packets with symmetric key crypto. CVE-2015-1799 - Authentication doesn't protect symmetric associations against DoS attacks. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* packages: indentation cleanupJerzy Grzegorek2015-03-311-11/+11
| | | | | | | This commit doesn't touch infra packages. Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* ntp: move systemd service file to /usr/libMike Williams2015-03-201-2/+3
| | | | | Signed-off-by: Mike Williams <mike@mikebwilliams.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* ntp: rebase nano patch to apply cleanlyDanomi Manchego2015-02-121-6/+11
| | | | | Signed-off-by: Danomi Manchego <danomimanchego123@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* ntp: security bump to version 4.2.8p1Baruch Siach2015-02-114-158/+3
| | | | | | | | | | | | | | | Fixes: CVE-2014-9297 - vallen is not validated in several places in ntp_crypto.c, leading to a potential information leak or possibly a crash CVE-2014-9298 - ::1 can be spoofed on some OSes (including "some versions" of Linux), so ACLs based on IPv6 ::1 addresses can be bypassed Drop a patch applied upstream, along with its accompanied AUTORECONF. Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* ntp: fix hash fileFabio Porcedda2014-12-311-1/+1
| | | | | | | | Add a space between the hash and filename so the hash can be used. Signed-off-by: Fabio Porcedda <fabio.porcedda@gmail.com> Cc: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/ntp: fix installationYann E. MORIN2014-12-261-2/+2
| | | | | | | | | | | | | | | | Since 5d5c9a8 (ntp: security bump to version 4.2.8), scripts/ntp-wait and scripts/ntptrace are no longer scripts themselves, but directories containing those scripts. Fixes: http://autobuild.buildroot.org/results/518/5189e84004bf28b891da3ee07fecc8717b4e8e8c/ (ntp-wait) http://autobuild.buildroot.org/results/005/0056192a06d44814a0279637c4bcbf602936e7ff/ (ntptrace) http://autobuild.buildroot.org/results/8f3/8f372acf73743edf8027cda6865ba1aa7b6413a3/ (both) ... Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Cc: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package: indentation cleanupJerzy Grzegorek2014-12-241-5/+6
| | | | | Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* ntp: adjust initscriptGustavo Zacarias2014-12-231-26/+20
| | | | | | | | | | Use proper status messages, make spacing standard instead of a mix of spacing/tabbing, drop boringly obvious comment from the header. Also make reload = restart since ntpd doesn't handle reloading resulting in the old reload being 'stop'. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* ntp: update sample configGustavo Zacarias2014-12-231-4/+4
| | | | | | | | Drop redundant IP version and double default restrict. Tweak KoD and other defaults for properness. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* ntp: security bump to version 4.2.8Gustavo Zacarias2014-12-236-39/+166
| | | | | | | | | | | | | | | | | | | | | Fixes: CVE-2014-9293 - ntpd generated a weak key for its internal use, with full administrative privileges. Attackers could use this key to reconfigure ntpd (or to exploit other vulnerabilities). CVE-2014-9294 - The ntp-keygen utility generated weak MD5 keys with insufficient entropy. CVE-2014-9295 - ntpd had several buffer overflows (both on the stack and in the data section), allowing remote authenticated attackers to crash ntpd or potentially execute arbitrary code. CVE-2014-9296 - The general packet processing function in ntpd did not handle an error case correctly. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* ntp: Adding pps support to ntpdBryan Brinsko2014-10-192-0/+14
| | | | | | | | | Added an option for the ntpd application to support pps inputs. Signed-off-by: Bryan Brinsko <bryan.brinsko@rockwellcollins.com> Signed-off-by: Matt Weber <matthew.weber@rockwellcollins.com> Acked-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
OpenPOWER on IntegriCloud