541021ec24
Since glibc 2.28 (https://savannah.gnu.org/forum/forum.php?forum_id=9205), the obsolete functions encrypt, encrypt_r, setkey, setkey_r, cbc_crypt, ecb_crypt, and des_setparity are no longer available to newly linked binaries, and the headers <rpc/des_crypt.h> and <rpc/rpc_des.h> are no longer installed. These functions encrypted and decrypted data with the DES block cipher, which is no longer considered secure. Software that still uses these functions should switch to a modern cryptography library, such as libgcrypt. So retrieve an upstream patch to use openssl instead of these functions and a new patch to remove the unsafe header/library path '-I/usr/include/openssl' Fixes: - http://autobuild.buildroot.org/results/c13ca8b8afa8de700caf8cd2fa1812b8552b3f4a Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
44 lines
1.2 KiB
Plaintext
44 lines
1.2 KiB
Plaintext
config BR2_PACKAGE_PPPD
|
|
bool "pppd"
|
|
depends on !BR2_STATIC_LIBS
|
|
depends on !BR2_TOOLCHAIN_USES_MUSL # Use __P() macro all over the tree
|
|
depends on BR2_USE_MMU
|
|
select BR2_PACKAGE_OPENSSL
|
|
help
|
|
An implementation of the Point-to-point protocol.
|
|
|
|
http://www.samba.org/ppp/
|
|
|
|
if BR2_PACKAGE_PPPD
|
|
|
|
config BR2_PACKAGE_PPPD_FILTER
|
|
bool "filtering"
|
|
select BR2_PACKAGE_LIBPCAP
|
|
help
|
|
Packet filtering abilities for pppd. If enabled,
|
|
the pppd active-filter and pass-filter options
|
|
are available.
|
|
|
|
config BR2_PACKAGE_PPPD_RADIUS
|
|
bool "radius"
|
|
help
|
|
Install RADIUS support for pppd
|
|
|
|
config BR2_PACKAGE_PPPD_OVERWRITE_RESOLV_CONF
|
|
bool "overwrite /etc/resolv.conf"
|
|
default y
|
|
help
|
|
Overwrite /etc/resolv.conf instead of maintaining the
|
|
separate list of nameservers in /etc/ppp/resolv.conf
|
|
|
|
Note that the pppd default of writing to /etc/ppp/resolv.conf
|
|
does not work on a read-only rootfs unless you make it
|
|
writable in your rootfs customizations (e.g. by linking it to
|
|
a file in tmpfs or by mounting a writable filesystem on it).
|
|
|
|
endif
|
|
|
|
comment "pppd needs a uClibc or glibc toolchain w/ dynamic library"
|
|
depends on BR2_STATIC_LIBS || BR2_TOOLCHAIN_USES_MUSL
|
|
depends on BR2_USE_MMU
|