summaryrefslogtreecommitdiffstats
path: root/package/ntp
Commit message (Collapse)AuthorAgeFilesLines
* ntp: security bump to version 4.2.8p6Gustavo Zacarias2016-01-202-4/+4
| | | | | | | | | | | | | | | | | | | CVE-2015-7973 - Deja Vu: Replay attack on authenticated broadcast mode CVE-2015-7974 - Skeleton Key: Missing key check allows impersonation between authenticated peers CVE-2015-7975 - nextvar() missing length check CVE-2015-7976 - ntpq saveconfig command allows dangerous characters in filenames CVE-2015-7977 - reslist NULL pointer dereference CVE-2015-7978 - Stack exhaustion in recursive traversal of restriction list CVE-2015-7979 - Off-path Denial of Service (DoS) attack on authenticated broadcast mode CVE-2015-8137 - origin: Zero Origin Timestamp Bypass CVE-2015-8158 - Potential Infinite Loop in ntpq Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* ntp: security bump to version 4.2.8p5Gustavo Zacarias2016-01-082-4/+4
| | | | | | | | | Fixes: CVE-2015-5300 - MITM attacker can force ntpd to make a step larger than the panic threshold. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* ntp: bump to version 4.2.8p4James Knight2015-10-222-4/+4
| | | | | Signed-off-by: James Knight <james.knight@rockwellcollins.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* ntp: add ntptime optionJames Knight2015-10-203-0/+36
| | | | | | | | Allow the `ntptime` utility to be included on a target. [Peter: add comment why AUTORECONF is needed] Signed-off-by: James Knight <james.knight@rockwellcollins.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package: Replace 'echo -n' by 'printf'Maxime Hadjinlian2015-10-041-2/+2
| | | | | | | | | | | | 'echo -n' is not a POSIX construct (no flag support), we shoud use 'printf', especially in init script. This patch was generated by the following command line: git grep -l 'echo -n' -- `git ls-files | grep -v 'patch'` | xargs sed -i 's/echo -n/printf/' Signed-off-by: Maxime Hadjinlian <maxime.hadjinlian@gmail.com> Reviewed-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/ntp: increase pool server count in default configGergely Imreh2015-07-131-0/+2
| | | | | | | | | | | | | To protect agains 1 falsticker NTP server, the client needs to connect to at least 4 servers. Source: http://support.ntp.org/bin/view/Support/SelectingOffsiteNTPServers 5.3.3. Upstream Time Server Quantity Signed-off-by: Gergely Imreh <imrehg@gmail.com> Acked-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* ntp: drop unused POST_PATCH_HOOKS handlingPeter Korsgaard2015-07-061-2/+0
| | | | | | | Now that NTP_PATCH_FIXUPS is gone. Reported-by: Danomi Manchego <danomimanchego123@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* ntpd: drop unneeded uClibc workaround for refclock_pcf.cPeter Korsgaard2015-07-061-4/+0
| | | | | | | | | | | | | | | | | | | | refclock_pcf.c contains code using the tm_gmtoff member of struct tm, which is only available on uClibc if it is built with __UCLIBC_HAS_TM_EXTENSIONS__. This change date back to: commit 7129da009cc72575a84a30c4587bd99f745c49d4 Author: Eric Andersen <andersen@codepoet.org> Date: Sat Jan 18 21:27:22 2003 +0000 Merge a bunch of stuff over from the tuxscreen buildroot, with many updates to make things be more consistant. -Erik But nowadays our uClibc configs DO enable __UCLIBC_HAS_TM_EXTENSIONS__, so it is no longer needed and can be dropped. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* ntp: drop uselss patch fixup which sometimes breaks rebuildDanomi Manchego2015-07-061-1/+0
| | | | | | | | | | | Drop sed line which no longer changes anything as upstream has changed to use strrchr. Worse, it bumps each ntpd/*.c file's modification time, which sometimes triggers a strange dependency path causing the makefile to attempt to run the ntpd keyword-gen app, which fails, because it's been cross-compiled. Signed-off-by: Danomi Manchego <danomimanchego123@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* ntp: security bump to version 4.2.8p3Gustavo Zacarias2015-07-022-3/+5
| | | | | | | | | Fixes: CVE-2015-5146 - ntpd control message crash: Crafted NUL-byte in configuration directive. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* ntp: install after busyboxBaruch Siach2015-05-191-1/+1
| | | | | | | | Make sure that ntp installs after busybox so that it overrides the busybox provided ntpd applet. Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* packages: remove non-IPv6 dependencies and tweaksGustavo Zacarias2015-04-221-4/+0
| | | | | | | | Now that IPv6 is mandatory remove package dependencies and conditionals for it. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* ntp: security bump to version 4.2.8p2Gustavo Zacarias2015-04-072-3/+3
| | | | | | | | | | | Fixes: CVE-2015-1798 - ntpd accepts unauthenticated packets with symmetric key crypto. CVE-2015-1799 - Authentication doesn't protect symmetric associations against DoS attacks. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* packages: indentation cleanupJerzy Grzegorek2015-03-311-11/+11
| | | | | | | This commit doesn't touch infra packages. Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* ntp: move systemd service file to /usr/libMike Williams2015-03-201-2/+3
| | | | | Signed-off-by: Mike Williams <mike@mikebwilliams.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* ntp: rebase nano patch to apply cleanlyDanomi Manchego2015-02-121-6/+11
| | | | | Signed-off-by: Danomi Manchego <danomimanchego123@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* ntp: security bump to version 4.2.8p1Baruch Siach2015-02-114-158/+3
| | | | | | | | | | | | | | | Fixes: CVE-2014-9297 - vallen is not validated in several places in ntp_crypto.c, leading to a potential information leak or possibly a crash CVE-2014-9298 - ::1 can be spoofed on some OSes (including "some versions" of Linux), so ACLs based on IPv6 ::1 addresses can be bypassed Drop a patch applied upstream, along with its accompanied AUTORECONF. Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* ntp: fix hash fileFabio Porcedda2014-12-311-1/+1
| | | | | | | | Add a space between the hash and filename so the hash can be used. Signed-off-by: Fabio Porcedda <fabio.porcedda@gmail.com> Cc: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/ntp: fix installationYann E. MORIN2014-12-261-2/+2
| | | | | | | | | | | | | | | | Since 5d5c9a8 (ntp: security bump to version 4.2.8), scripts/ntp-wait and scripts/ntptrace are no longer scripts themselves, but directories containing those scripts. Fixes: http://autobuild.buildroot.org/results/518/5189e84004bf28b891da3ee07fecc8717b4e8e8c/ (ntp-wait) http://autobuild.buildroot.org/results/005/0056192a06d44814a0279637c4bcbf602936e7ff/ (ntptrace) http://autobuild.buildroot.org/results/8f3/8f372acf73743edf8027cda6865ba1aa7b6413a3/ (both) ... Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Cc: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package: indentation cleanupJerzy Grzegorek2014-12-241-5/+6
| | | | | Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* ntp: adjust initscriptGustavo Zacarias2014-12-231-26/+20
| | | | | | | | | | Use proper status messages, make spacing standard instead of a mix of spacing/tabbing, drop boringly obvious comment from the header. Also make reload = restart since ntpd doesn't handle reloading resulting in the old reload being 'stop'. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* ntp: update sample configGustavo Zacarias2014-12-231-4/+4
| | | | | | | | Drop redundant IP version and double default restrict. Tweak KoD and other defaults for properness. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* ntp: security bump to version 4.2.8Gustavo Zacarias2014-12-236-39/+166
| | | | | | | | | | | | | | | | | | | | | Fixes: CVE-2014-9293 - ntpd generated a weak key for its internal use, with full administrative privileges. Attackers could use this key to reconfigure ntpd (or to exploit other vulnerabilities). CVE-2014-9294 - The ntp-keygen utility generated weak MD5 keys with insufficient entropy. CVE-2014-9295 - ntpd had several buffer overflows (both on the stack and in the data section), allowing remote authenticated attackers to crash ntpd or potentially execute arbitrary code. CVE-2014-9296 - The general packet processing function in ntpd did not handle an error case correctly. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* ntp: Adding pps support to ntpdBryan Brinsko2014-10-192-0/+14
| | | | | | | | | Added an option for the ntpd application to support pps inputs. Signed-off-by: Bryan Brinsko <bryan.brinsko@rockwellcollins.com> Signed-off-by: Matt Weber <matthew.weber@rockwellcollins.com> Acked-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* packages: rename FOO_CONF_OPT into FOO_CONF_OPTSThomas De Schampheleire2014-10-041-5/+5
| | | | | | | | | | | | To be consistent with the recent change of FOO_MAKE_OPT into FOO_MAKE_OPTS, make the same change for FOO_CONF_OPT. Sed command used: find * -type f | xargs sed -i 's#_CONF_OPT\>#&S#g' Signed-off-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* ntp: fix undefined variable in error printDanomi Manchego2014-08-211-1/+1
| | | | | | | The variable "$SCRIPTNAME" is undefined; replace with "$0". Signed-off-by: Danomi Manchego <danomimanchego123@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* ntp: rename patches to follow BR guidelinesDanomi Manchego2014-07-182-0/+0
| | | | | Signed-off-by: Danomi Manchego <danomimanchego123@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* ntp: properly select/filter netsnmp for ntpsnmpdGustavo Zacarias2014-07-171-0/+2
| | | | | | | | | | | BR2_PACKAGE_NTP_SNMPD was pushing netsnmp into dependencies but was never selected, and since netsnmp requires fork it wasn't filtered out for nommu. Fixes: http://autobuild.buildroot.net/results/776/7769afe0da09e3f4f96d9a0f4c0febb0c72cc34f/ Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* ntpd: drop default /etc/default/ntpd filePeter Korsgaard2014-07-092-6/+0
| | | | | | | With the recent change to the init script the default /etc/default/ntpd file doesn't do anything, so don't install it. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* Fixing ntpd time syncing problemAngelo Compagnucci2014-07-094-15/+10
| | | | | | | | | | | | Add ntp.conf file to make ntpd syncing. Starting ntpd daemon with -g to sync time also with big offsets. Removes the use of deprecated ntpdate command for initial time sync. [Peter: drop unused NTPDATE_BIN variable] Signed-off-by: Angelo Compagnucci <angelo.compagnucci@gmail.com> Acked-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Tested-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* packages: replace command install by $(INSTALL)Maxime Hadjinlian2014-06-081-2/+2
| | | | | | Signed-off-by: Maxime Hadjinlian <maxime.hadjinlian@gmail.com> Acked-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* ntp: add systemd unit file for ntpdIvan Sergeev2014-03-072-1/+23
| | | | | | Signed-off-by: Ivan Sergeev <vsergeev@kumunetworks.com> Reviewed-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package: add <pkg>_VERSION_MAJOR variableJerzy Grzegorek2013-12-191-2/+3
| | | | | | Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Reviewed-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* packages: remove uninstall commandsThomas De Schampheleire2013-12-061-7/+0
| | | | | Signed-off-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* Normalize separator size to 80Alexandre Belloni2013-06-061-2/+2
| | | | | Signed-off-by: Alexandre Belloni <alexandre.belloni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* ntp: add license informationMark Jackson2012-11-081-0/+2
| | | | | Signed-off-by: Mark Jackson <mpfj@newflow.co.uk> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* perl: prepare the removal of microperlFrancois Perrad2012-11-031-2/+2
| | | | Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* all packages: rename XXXTARGETS to xxx-packageArnout Vandecappelle (Essensium/Mind)2012-07-171-1/+1
| | | | | | | | | | | | | Also remove the redundant $(call ...). This is a purely mechanical change, performed with find package linux toolchain boot -name \*.mk | \ xargs sed -i -e 's/$(eval $(call GENTARGETS))/$(eval $(generic-package))/' \ -e 's/$(eval $(call AUTOTARGETS))/$(eval $(autotools-package))/' \ -e 's/$(eval $(call CMAKETARGETS))/$(eval $(cmake-package))/' Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* ntp: bump to version 4.2.6p5Gustavo Zacarias2012-01-261-1/+1
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* ntp: bump to version 4.2.6p4 and enhanceGustavo Zacarias2011-10-172-18/+25
| | | | | | | | | * Bump to version 4.2.6p4 * Add new ntpsnmpd option * Fix style Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* package: remove useless arguments from AUTOTARGETSThomas Petazzoni2011-09-291-1/+1
| | | | | | | | | | Thanks to the pkgparentdir and pkgname functions, we can rewrite the AUTOTARGETS macro in a way that avoids the need for each package to repeat its name and the directory in which it is present. [Peter: pkgdir->pkgparentdir] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* ntp: only install init script if ntpd is enabledPeter Korsgaard2011-02-042-7/+6
| | | | | | | | Further more: - Rename to S49ntp to match other packages - Fix start target to run ntpd, and only try ntpdate if available Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* ntp: add ntpdate optionGustavo Zacarias2011-02-043-36/+26
| | | | | | | | | | | | | Closes #2935 Add ntpdate option and make ntpd optional. Based on incomplete patch by Frederik Pasch <fpasch@googlemail.com> Also enable crypto when openssl is enabled. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* ntp: bump to version 4.2.6p3 and fix glibc build failureGustavo Zacarias2011-01-303-1/+24
| | | | | | | | | Bump to version 4.2.6p3 and fix a build failure with external toolchains that use certain glibc versions as point out by speakman on IRC. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Acked-by: Daniel Nyström <daniel.nystrom@timeterminal.se> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* ntp: disable ntpsnmpd supportPeter Korsgaard2010-11-041-1/+2
| | | | | | Doesn't build. Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* ntp: convert to autotargets and bump to 4.2.6p2Martin Banky2010-09-215-135/+79
| | | | | | | | | Also added additional options for ntp and fixed a build issue when IPv6 support is not available. [Peter: small tweaks] Signed-off-by: Martin Banky <Martin.Banky@gmail.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* Merge branch '2010-05-15-fixes' of ↵Peter Korsgaard2010-05-211-0/+36
|\ | | | | | | git://git.busybox.net/~tpetazzoni/git/buildroot
| * ntp: fix build failureThomas Petazzoni2010-05-201-0/+36
| | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch adds a patch to NTP to fix the following build failure, using a workaround patch found on the Fedora bugzilla: ntp_loopfilter.c: In function 'local_clock': ntp_loopfilter.c:571: error: 'MOD_NANO' undeclared (first use in this function) ntp_loopfilter.c:571: error: (Each undeclared identifier is reported only once ntp_loopfilter.c:571: error: for each function it appears in.) ntp_loopfilter.c: In function 'loop_config': ntp_loopfilter.c:896: error: 'MOD_NANO' undeclared (first use in this function) Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* | ntp: fix build without ipv6 supportPeter Korsgaard2010-05-201-0/+24
|/ | | | | | Closes #1693 Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* buildroot: silence ./configure step when building with 'make -s'Peter Korsgaard2009-10-011-1/+1
| | | | | | | | | | We have been passing -q to ./configure when using 'make -s' for packages using Makefile.autotools.in for some time. Do the same for packages using autotools, but not using the Makefile.autotools.in infrastructure, taking care to not do it for packages with hand written configure scripts. Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
OpenPOWER on IntegriCloud