Commit Graph

18 Commits

Author SHA1 Message Date
Jan Pavlinec 299e5b0a9b
treewide: add PKG_CPE_ID for better cvescanner coverage
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-09-17 12:40:26 +02:00
Miroslav Lichvar cd67b85490 chrony: update to 3.5
Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2019-05-14 14:54:00 +02:00
Miroslav Lichvar 1b68402e9c chrony: update to 3.4
Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2018-09-19 17:43:26 +02:00
Miroslav Lichvar c9164a4d8a chrony: fix configuration of IPv6 client access
Fix the init script to allow access from IPv6 subnets of the interface
specified in allow section in /etc/config/chrony.

Fixes issue #7039.

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2018-09-17 17:14:30 +02:00
Miroslav Lichvar dd515410a2 chrony: disable sechash support
Don't use the Nettle library (or NSS, libtomcrypt) even if it is
available.

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2018-04-10 09:00:16 +02:00
Miroslav Lichvar 5b65338ccb chrony: update to 3.3
Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2018-04-04 13:32:41 +02:00
Matthias Schiffer 6e3a609d07
treewide: remove superfluous + signs from PKG_BUILD_DEPENDS
A + sign does not have meaning in build depends.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
2018-01-07 20:08:31 +01:00
Miroslav Lichvar 8a7fc71b52 chrony: update to 3.2
Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2017-09-18 09:55:16 +02:00
Metafly fd4449e1de chrony: set rtcsync config option
Else the system will always stay in UNSYNC state.
Even if there is no real RTC.
See chrony minimal config:
http://chrony.tuxfamily.org/faq.html#_what_is_the_minimum_recommended_configuration_for_an_ntp_client

Signed-off-by: Stefan Sydow <st@metafly.info>
2017-02-10 18:13:31 +01:00
Miroslav Lichvar e122db9184 chrony: update to 3.1
Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2017-01-31 17:18:14 +01:00
Miroslav Lichvar 9dd760815a chrony: enable asynchronous name resolving
Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2016-12-13 14:06:56 +01:00
Miroslav Lichvar 1c4cc233d4 chrony: update to 2.4.1
Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2016-11-21 19:19:13 +01:00
Miroslav Lichvar 4f2274fc48 chrony: update to 2.4
Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2016-06-07 21:21:44 +02:00
Miroslav Lichvar 5d74d04ac1 chrony: update to 2.3
Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2016-02-16 21:53:29 +01:00
Miroslav Lichvar af9b3b9add chrony: update to 2.2.1
Fixes CVE-2016-1567.

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2016-01-24 18:16:09 +01:00
Miroslav Lichvar 9b9c34e47d chrony: improve hotplug and init scripts
- fix the init script to read the right config
- rework the init script to allow reusing its code in the hotplug script
- find wan interfaces in the hotplug script instead of using hardcoded
  name and set the online/offline status separately for IPv4/IPv6
- allow NTP access on interfaces that are configured after chronyd start
- add NTP servers obtained from DHCP, options are specified in a new
  dhcp_ntp_server config section
- start chronyd before the network service, include a patch to always
  have IP_FREEBIND defined, which seems to be missing with uclibc

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2015-11-14 13:36:52 +01:00
Miroslav Lichvar 116daf94e6 chrony: update to 2.2
Support for authentication with command key was replaced with
communication over Unix domain socket.

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2015-10-20 07:56:22 +02:00
Miroslav Lichvar 71559ae85f chrony: import from oldpackages
Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2015-10-13 10:10:53 +02:00