3.1.x
Changes between 3.1.1-beta2 and 3.1.1-beta3
general
- IntelPro/1000 driver added to modules tarball
- the modules tarball again includes the i2c driver from lmsensors package
shorewall
- fix permission for /etc/shorewall/zones
ppp
webconf
- changed the get_interface function to cover ppp interfaces which
do not show an an address in the default route
modules
- fix indentation while parsing /etc/modules
Changes between 3.1.1-beta1 and 3.1.1-beta2
general
- update kernel to version 2.4.34.6
- enable ppp multilink support (patch provided by "Pierre G. Martineau")
- new busybox upstream version 1.12.4
- add bb applet traceroute
- enabled malloc_compat in uclibc (developers only) (patch provided by NiTr0)
- buildenv patched to be build with any gcc on the host (developers only) (patch provided by NiTr0)
- ipv4zones kernel patch (patch provided by NiTr0)
- Linux IMQ kernel patch (patch provided by NiTr0)
- Gigabit Ethernet driver for Marvell and SysKonnect network adapter cards (sk98lin) (patch provided by NiTr0)
webconf
- new page for Network Settings
- a reminder to set a password after first login
- ping and traceroute in webconf
(all webconf patches provided by Erich Titl)
ppp
- ipv4zones patch (patch provided by NiTr0)
iptables
- support for ppp multilink (patch provided by "Pierre G. Martineau")
- support for Linux IMQ (patch provided by NiTr0)
dnsmasq
new upstream version 2.47
dropbear
- new upstream version 0.52
shorewall
- enable traceroute from fw to net
- cleanup icmp rules
Changes between 3.1 and 3.1.1-beta1
general
- busybox updated to version 1.9.2
dropbear
shorewall
dnsmasq
webconf
- Reworked formatting of the webconf pages by extended use
of the css-style sheet webconf.css. This adds some consistent
colouring and indentations with hopefully uniform font sizes
(thanks Mats E. Andersson)
Changes between 3.1-rc1 and 3.1
openntpd.lwp
- code cleanup and minor size reduction
Changes between 3.1-beta3 and 3.1-rc1
general
- added configdb.ser and syslinux.ser to the base image
to alleviate the use of serial consoles
dropbear
- add missing option in /etc/default/dropbear
webconf
- fix uid and gid in dnsmasq.lwp
- add openntpd.lwp (thx to Mats E Andersson)
Changes between 3.1-beta2 and 3.1-beta3
general
- upgrade busybox to version 1.8.2
- patch to fix "ping: can't create raw socket: Address family not supported by protocol" whilst trying to ping/connect to a host from /etc/hosts and ipv6 module is not loaded.
- enable external dhcp in busybox - fixes failing dhcpcd connections (broken with beta2)
openntpd
- corrected /etc/default/openntpd (option -s instead of -d)
Changes between 3.1-beta1 and 3.1-beta2
initrd
- upgrade busybox to version 1.7.3 (fixes logger bug)
- top now shows 1/10 percent in statistics
shorewall
dnsmasq
webconf (plus cgi's and lwp files)
- fix running haserl suid
- fix colours and layout for various cgi's (done by Mats E. Andersson)
- fix daemon start/restart (fixed by Mats E. Andersson)
- fixes process status errors in expert mode (provided by "phamrage")
openntpd
- Reconnect after an EINVAL to make it work with dynamic IP
addresses.
dropbear
Changes between 3.0.2 and 3.1-beta1
general
- the ISO image loads dropbear and generates keys, if necessary,
at boottime by default
- openntpd replaces rdate
linux
- updated to kernel 2.4.34
- updated to grsecurity-2.1.10 kernel patch
shorwall
initrd
- updated busybox to 1.5pre
- switched to busybox sed, init, halt, poweroff and reboot
- removed rdate applet
root
- check for existence of root password at login
etc
- various cleanups in init.d scripts
- removed some obsolete directories
- removed rdate traces
webconf
- various improvements by Mats Erik Andersson, like:
colouring, dnsmasq.lwp, validation and filters for logfile
representation
openntpd
3.0.x
Changes between 3.0.1 and 3.0.2
mhttpd
ulogd
- started earlier in the bootprocess
config
shorwall
dropbear
dnsmasq
Changes between 3.0 and 3.0.1
initrd
- added scd0 device for SCSI CD-ROM autodetection to work properly
root
- fixed the mail script
- set owner on scd0 device
etc
- chmod 600 interfaces, this file can contain secret data (wpa, wep)
shorewall
- two small fixes for 3.2.7 (errata)
Changes between 3.0rc1 and 3.0
shorewall
Changes between 3.0beta3 and 3.0-rc1
syslinux
- added "append reboot=bios" to syslinux.cfg to support rebooting
devices without a keyboard controler (WRAP)
moddb
- updated ipp2p module to version 0.8.2
shorewall
- updated to version 3.2.6 with errata
ulogd
- the logrotating cron scripts are now visible in the config menu
also extend the daily rotating script to optional support multiple
logfiles
iptables
- update ipp2p module to version 0.8.2
etc
- commented out "paranoid" option in hosts.deny
config
- fixed a typo in the usage message of build-modules
some formatting fixes
mhttpd(s)
- better integration of config, daemon and cron (logrotating) files
webconf
- applied formatting patches by Mats Erik Andersson
dnsmasq.lwp, dropbear.lwp, keyboard.lwp
- applied formatting patches by Mats Erik Anderson
Changes between 3.0beta2 and 3.0beta3
general
- pppoe and dnsmasq lwp webconf packages added
- applied vlan patch to natsemi and tulip modules
config
various improvements by Paul Traina and fixes by Cedric Schieli:
- addition of "build-modules" script to extract the modules listed in /etc/modules from a kernel tarball and place them in /lib/modules
- a new "with_storage" script that replaces the "mount.back" script
- the "lrcfg.back" and "lrcfg.back.script" are now replaced by a single "lrcfg.backup" script
- new options in lrcfg and apkg (provided by Paul Traina):
- Configuration changed since last save
- Configuration changed from distribution
- small cleanup by removing the wtmp option
- various other cleanups, additions and fixes in apkg
initrd
- enabled binary checking in busybox's diff applet
modules
- removed the "bang" commands, a moddb can now be created with the
"build-modules" script and a kernel tarball
dnsmasq
dropbear
- keys are automatically created when they not exist, the "gendropbearkeys" script is removed.
Suggested by Paul Traina
shorewall
- updated to version 3.2.5 with errata
webconf
- small change in how apkg is called due to an API change in apkg
Changes between 3.0beta1 and 3.0beta2
general
- .list files are created at boot and install time for future use
- syslinux updated to version 3.20
initrd
- busybox tar patch (also applied upstream) by Cedric Schieli
webconf
- package backup fixed by Nathan Angelacos
shorewall
etc
- greatly simplified networking init script, the options file is deprecated and
the general sysctl.conf file is used instead
- removed wd1100 hack in the watchdog init script, the wd1100 kernel module understands parameters now (thanks to Erich Titl)
- added some extra files to etc.local
modules
- added example of wd1100 parameters
- added some extra examples (thanks to Cedric Schieli)
Changes between 3.0beta1 and 2.4.2
general
- updated to uClibc-0.9.28
- changed all packages to include .local files and removed (.exclude).list files
- new config system. config changes are now saved in a central repository (configdb)
linux
- updated to kernel 2.4.33
- updated to grsecurity-2.1.9 kernel patch
- updated to openswan-2.4.6 kernel patches
- added condition and classify netfilter modules
- enabled SATA modules
- enabled use DMA when available
- kernel compressed with upx-2.02
config
- replaced lrpkg by apkg
- several changes for new config system
- package upgrade option by Cedric Schieli
modules
- this package now only contains the module loading logic
modules are saved in the central moddb repository
moddb
shorewall
root
- removed unused initrd directory
- added home directory to make adduser happy
initrd
- updated to busybox 1.2.1
- use busybox ash with command completion
keyboard
- removed some unused keymaps
ppp/pppoe
etc
- updated protocols and services
- some small changes and cleanups
local
- changed the function of the local package to select extra files to be added to the configdb
2.4.x
Changes between 2.4.1 and 2.4.2
dnsmasq
- applied an extra stability patch to version 2.27
shorewall
Changes between 2.4 and 2.4.1
general
dnsmasq
- updated to version 2.27 with a stability patch
shorewall
dropbear
- fixed bug in dropbear.lwp (uploading keys wasn't possible)
Reported by David Brooke updated by Nathan Angelacos
Changes between 2.4-rc1 and 2.4
dropbear
- updated to version 0.48.1
Changes between 2.4-beta1 and 2.4-rc1
general
- upgraded to grsecurity-2.1.8 kernel patch
- removed bridge.lrp from base image, can be downloaded from the packages page
etc
- improved the tftpd example in inetd.conf
dnsmasq
ulogd
iptables
- updated to version 1.3.5
- added ipp2p iptables module
modules
- added ipp2p kernel module
shorewall
Changes between 2.3.1 and 2.4-beta1
general
- upgraded to kernel-2.4.32
- upgraded to ebtables-brnf-11-2 kernel patch
- upgraded to grsecurity-2.1.7 kernel patch
- applied openswan-2.4.4 kernel patches
- removed ipv6 fix patch, in mainline now
modules
etc
- commented out lrpstat line in inetd.conf
dropbear
webconf
- ntpdate fix for correctly reporting status
- change for new handling of keyboard package configuration
dnsmasq
shorewall
keyboard
- use /etc/default config file instead of mucking with init.d file
iptables
- recompiled against kernel-2.4.32
2.3.x
Changes between 2.3 and 2.3.1
iptables
shorewall
Changes between 2.3-rc1 and 2.3
general
- upgraded to ebtables-brnf-10_vs_2.4.31 kernel patch
dnsmasq
webconf
- updated to version 1.0.0 rev 5
Changes between 2.3-beta4 and 2.3-rc1
general
- applied kernel connmark netfilter patch
- added connmark and gpio drivers to Bering-uClibc_modules_2.4.31 tarball
etc
- added "ll" alias to /etc/profile
iptables
shorewall
- updated to version 2.4.2 and added small echo patch
initrd
- added arping applet to busybox
linux
- replaced hard-coded keyboard check patch with runtime check version (thanks to Paul Traina); it is now possible to use the standard kernel with pcengines hardware
dhcpcd
- updated to patchlevel 22 (security fix)
dropbear
bridge
- corrected revision number
Changes between 2.3-beta3 and 2.3-beta4
general
- upgraded to kernel-2.4.31
- upgraded to grsecurity-2.1.6-2.4.31 kernel patch
- applied wireless v18 update patch
- applied ipv6 fix patch
modules
iptables
- recompiled against kernel-2.4.31
initrd
- removed sed (added to root.lrp)
- i2c devices added to root.dev.mk
- small change in linuxrc to free ram and umount initrd instead of doing it in the etc package
root
- added sed
- sysklogd upgraded to version 1.4.1-17
- applied hfsc support patch to iproute
- applied connmark patch to iptables (for shorewall-2.4.0+)
etc
- removed the freeram and umount initrd lines in /etc/init.d/rcS, done in linuxrc now
shorewall
- upgraded to version 2.4.0
Changes between 2.3-beta2 and 2.3-beta3
general
- upgraded to kernel-2.4.30
- upgraded to grsecurity-2.1.5-2.4.30 kernel patch
- upgraded to ebtables-brnf-9_vs_2.4.30 kernel patch
- applied wireless v17 update patch
modules
iptables
- recompiled against kernel-2.4.30
ulogd
webconf
- small fix in init.d file, no need to stop webconf while halting or rebooting router
shorwall
- updated to version 2.2.3 (lrp package created by Paul Traina)
Changes between 2.3-beta1 and 2.3-beta2
general
- switched from weblet to webconf, because of this removed weblet/sh-httpd and added webconf/mhttpd packages.
Also added some lwp packages: keyboard, dropbear and webconf
dnsmasq
shorwall
- updated to version 2.0.17
etc
- commented out the sh-httpd line in /etc/inetd.conf, mhttpd is started by an init.d script
Changes between 2.2.3 and 2.3-beta1
general
- compiled everything with buildtool and gcc-3.3.3, created every package with builpackage
- upgraded to kernel-2.4.29
- upgraded to grsecurity-2.1.3-2.4.29 kernel patch
- upgraded to ebtables-brnf-9_vs_2.4.29 kernel patch
- upgraded to openswan-1.0.9 ipsec patches
- used the latest patches from pom-ng CVS
- added small patch to uClibc to play nice with buildtool
initrd
- fixed the ubd devices
- added dev/console to backup list (to make buildtool happy)
config
- small change in initrd backup: don't recreate /dev/console but just copy it with a backup
iptables
- updated to version 1.3.1
- no more grsecurity iptables patch, not maintained anymore
root
- updated to tcp-wrappers-7.6.dbs-8 (with usage ipv6 patches)
- updated to sysvinit-2.86.ds1-1
- updated to sysklogd-1.4.1-16
- updated to cron-3.0pl1-86
- updated to e3-2.6.2
- extended the edit script to fall back to e3ne if no edit environment variable is found
dropbear
ulogd
2.2.x
Changes between 2.2.2 and 2.2.3
shorwall
- updated to version 2.0.15
dhcpcd
- updated to version 1.3.22pl4-20
config
- solved bug with lrpkg not adding backup filesystem device to backupdisk file
initrd
dnsmasq
- added missing /var/lib/misc directory
- updated to version 2.20
etc
- typo in etc.sys.conf
- added openvpn to /etc/services
Changes between 2.2.1 and 2.2.2
general
- changed initrd.version to a real file and changed symlinks to point to initrd.version instead of root.version.
- Removed root.version from initrd and added a root.version symlink in root.lrp.
- Changed linuxrc and bootmisc.sh scripts to reflect these changes.
shorwall
- updated to version 2.0.10
dnsmasq
initrd
- upgraded busybox to version 1.0 stable and enabled sysctl and run-parts applets
- this new version also solves the reported "tail -1 *" bug
root
- removed run-parts (busybox applet now)
etc
- added sysctl.conf file and added an entry for it in etc.sys.conf
- changed crontab to work with busybox run-parts
Changes between 2.2.0 and 2.2.1
general
- upgraded syslinux to version 2.11
initrd
- added wait statement to support usb pen booting
sh-httpd
- added missing sh-httpd.mime file
weblet
shorewall
- upgraded to version 2.0.9
dnsmasq
- upgraded to version 2.15 and applied small patch to fully enable ipv6
dropbear
- clarified the use of a banner again
Changes between 2.2.0_rc1 and 2.2.0
initrd
- upgraded busybox to version 1.0.0-rc3
dnsmasq
weblet
- splitted weblet contents and sh-http server
sh-httpd
Changes between 2.2.0_b5 and 2.2.0_rc1
general
- simplified package config entries
dnsmasq
dropbear
etc
- solved a small issue with partial backup of etc.lrp
shorewall
- upgraded to version 2.0.7
weblet
- solved a bug with shorewall and weblet both owning start/stop scripts
Changes between 2.2.0_b4 and 2.2.0_b5
general
- switched to kernel pcmcia/cardbus
- removed broken "Donald Becker" drivers
- updated syslinux to version 2.0.7
kernel
- patched local DoS (CAN-2004-0554)
initrd
- patch for TMP size in linuxrc
- switched to dash with echo and hetio patches
dnsmasq
bridge
- some small improvements and corrections
iptables
- upgraded to version 1.2.11
dropbear
- upgraded to version 0.42
- clarified the use of a banner
dhcpcd
- some small fixes to make it work with wlan
root
- upgraded to iproute-ss10824-13.1 (security fix)
- removed net.conf and sys.conf (now in the etc package)
- upgraded to e3-2.50-1
shorewall
etc
- added net.conf and sys.conf
config
- changed the location of net.conf and sys.conf
- changed lrcfg.conf.packs to work with dash
modules
- added a note about dependency of the crc32 module
local
- removed old file and saved 4 bytes :-)
Changes between 2.2.0_b3 and 2.2.0_b4
general
- upgraded to kernel-2.4.26
- upgraded to grsecurity-1.9.15-2.4.26 kernel patch
- upgraded to ebtables-brnf-6_vs_2.4.26 kernel patch
root
- small correction in update-rc.d script
- upgraded to iproute-ss10824-13
iptables
- recompiled against kernel 2.4.26
modules
- new 2.4.26 modules
- changed 2.4.24 to 2.4.26 in modules.exclude.list
Changes between 2.2.0_b2 and 2.2.0_b3
general
- replaced both dnscache and dhcpd by dnsmasq
root
- solved a bug in the mailscript, reported by M. Lu
- solved a small (old) bug in the update-rc.d script (f -> F)
initrd
- removed module-device mounting code from linuxrc
ppp
- enabled "usepeerdns" in /etc/ppp/options to write a resolv.conf file to /etc/ppp/
pppoe
- removed (commented) usepeerdns in "dsl-provider"
dhcpcd
- added code to write a resolv.conf file to /etc/dhcpc/
iptables
- applied small patch to iptables to use the new features in Shorewall-2.0.2
shorewall
- updated to version 2.0.2f
- opened udp ports 67 and 68 from loc to fw for the dhcp daemon portion of dnsmasq to work
modules
- addept Charles Steinkuehler's "bang" commands
- added a symlink from /lib/modules to /lib/modules/<kernel-version> to make some programs happy
Changes between 2.2.0_b1 and 2.2.0_b2
config
- applied some fixes to reflect changes in linuxrc (provided by Charles Steinkuehler)
- removed broken "backupdisk" script
initrd
- removed busybox fdformat applet, only used by "backupdisk" script
Changes between 2.1.2 and 2.2.0_beta1
general
- recompiled the uClibc libraries with a patch applied to be able to run "keepalived"
initrd
- new linuxrc and leaf.cfg handling by Charles Steinkuehler
- added arp applet to busybox
root
- removed arp binary, busybox applet now
- removed POSIXness construction and created "stand-alone" scripts of last remainings
modules
- added ip_conntrack modules
kernel
- modularized ip_conntrack to be able to set ip_conntrack_max and hash size on high-loaded firewalls. Suggested by Charles Steinkuehler.
2.1.x
Changes between 2.1.1 and 2.1.2
shorewall
- forgot to set ULOG in /etc/shorewall/policy
weblet
Changes between 2.1.0 and 2.1.1
general
- added md and ide-raid modules to the modules tarball
- upgrade from super-freeswan to openswan-1.0.3
initrd
- added top applet
- upgraded to busybox-1.00pre10
- removed bash symlink, this file is owned by the bash.lrp package
config
- solved bug in lrcfg.back with backup custom destination
shorewall
- updated to version 1.4.10e
etc
- workaround for export and alias problem in /etc/profile
dropbear
IPv6 addon
Changes between 2.1.0_rc2 and 2.1.0
kernel
- applied mremap patch (security fix)
initrd
- updated busybox to version 1.00-pre8
root
- corrected some file permissions
- updated root.help
- changed edit so a desired editor emulation can be set in /etc/profile also removed some old edit scripts
etc
- corrected some file permissions
- added a line in /etc/profile to set the desired editor emulation
shorewall
- updated to version 1.4.10c
dropbear
- solved a small (cosmetic) bug in /etc/init.d/dropbear
modules
- corrected the modules repository url
ppp, pppoe
- updated to ppp-2.4.2
- patched for pppoa support (plugin available separately)
Changes between 2.1.0_rc1 and 2.1.0_rc2
initrd
- upgraded to busybox-1.00pre7:
- enabled insmod "tainted modules" to solve the problem with loading the airo module
- solved the bug some users reported about corrupted packages after saving them
kernel
- some extra crypto modules added in config
- kernel compiled with -Os flag which saves 10 kbyte upx-compressed and has minimal to none impact on speed.
- updated to ebtables-brnf-5_vs_2.4.24 patch
dropbear
root
- POSIXness.mail patch from Brad Fritz applied to solve a problem with the "-v" option
etc
- In /etc/passwd, changed the shell for user "nobody" to bin/false
Changes from 2.0.1 to 2.1.0_rc1
kernel
- updated to linux-2.4.24 with the following patch list:
- pom-pending.patch (nf-log, nf-log-ipv6, ecn_raw_unclone)
- helpers-2.4.24 (quota, h323-conntrack-nat, mms-conntrack-nat, pptp-conntrack-nat, quake3-conntrack, talk-conntrack
- grsecurity-1.9.13-2.4.24
- ebtables-brnf-4_vs_2.4.24
- linux-mppe (for ppp-2.4.2)
- htb_k2.4.24_to_3.14
- wd1100_patch
- New config items:
- enabled ipvs modules
- enabled ebtables modules
modules
- updated to 2.4.24 modules
- updated to Eric Wolzak's new /etc/init.d/modutils script
dropbear
- updated to version 0.40
- provides now full port forwarding support
shorewall
iptables
- recompiled against linux-2.4.24
modules_ipv6
- updated to 2.4.24 modules
- updated to Eric Wolzak's new /etc/init.d/modutils script
ip6table, ip6tutil
- recompiled against linux-2.4.24
2.0.x
Changes from 2.0 to 2.0.1
initrd
- updated busybox to version 1.00-pre5
kernel
- do_brk security fix patch
- removed now obsolete soekris patch
ppp
- upgraded to latest ppp-2.4.2 CVS version (2003-11-27)
- removed /etc/init.d/ppp, /etc/networking/interfaces takes care of this
- removed /etc/ppp/no_ppp_on_boot, /etc/networking/interfaces takes care of this
- removed /etc/ppp/option.ttyXX
pppoe
- added maxfail example to dsl-provider
iptables
- updated to version 1.2.9 (with grsecurity patch applied)
shorwall
dropbear
- updated to version 0.39
- enabled tcp forwarding (-L)
- added scp to the package
etc
- updated protocols, rpc and services file
- added terminal on ttyS1 example to inittab
weblet
- added patch by Eric House to show log entries for a single target point on the firewall
- increased vertical size of the plugin window from 50 to 60 so that three plugins fit in the window without the need to scroll
- change to "viewnet" so that in the interfaces section no ipv6 related info is shown
IPV6 addon
- added ipv6 weblet plugin
- updated ip6table to version 1.2.9
Changes from 2.0rc3 to 2.0
weblet
- fixed some problems with the latest security patches
Changes from 2.0rc2 to 2.0rc3
weblet
shorewall
- fixed problem with shorewall and ipv6 enabled
ppp, pppoe
- updated to ppp-20031002 (2.4.2 CVS version)
- applied persist patch and rp-pppoe-3.5 update patch
Changes from 2.0rc1 to 2.0rc2
General
- updated helpfiles
- recompiled kernel with modularized softdog
- removed dbearkey.lrp, dropbear is a multicall binary now. Also removed from lrpkg.cfg.
etc
- wd1100 support in /etc/init.d/watchdog
modules
- added softdog module and load it in /etc/modules
ulogd
dropbear
- updated to version 0.38, compiled as multicall dropbear/dbearkey binary
dhcpcd
- solved a small problem in dhcpcd.list
pppoe
- removed pap.secrets from pppoe.conf
Changes from 2.0beta4 to 2.0rc1
general
- patched uClibc to resolve /dev/null problem
- added parport devices (0,1,2,3)
- upgraded to busybox-1.00-pre3 CVS
initrd
root
- removed ifup and ifdown (ifupdown), busybox applet now
etc
- removed /etc/adjust and /etc/exports, cleaned /etc/init.d/hwclock
- added ttyS1 to /etc/securetty
- added an ipv6 and v4tunnel example in /etc/network/interfaces
- changed the masklen keyword to netmask in /etc/network/interfaces (ifupdown change)
- changed /etc/network/ifstate to /var/run/ifstate in /etc/init.d/ifupdown (ifupdown change)
dropbear
- solved a small problem in /etc/init.d/dropbear with loading banners
dhcpcd
- added -d option in config to give some more verbose output
dnscache
- applied latest ipv6 patch
Changes from 2.0beta3 to 2.0beta4
General
- changed from pump to dhcpcd in base image
dropbear, dbearkey
- upgraded to dropbear 0.36
root
- simplified prompt in /root/profile
etc
- simplified prompt and removed backspace and screensize fixes in /etc/profile
- added ipv6 entries in /etc/hosts
- changed stat.sh in /etc/inetd.conf to lrpStat
- added ttyS0 to /etc/securetty
ppp, pppoe
weblet
- resolved some style errors and added plugin directory
Changes from 2.0beta2 to 2.0beta3
dropbear, dbearkey
- upgraded to dropbear 0.35 because of a remotely exploitable format string vulnerability in all previous versions
Changes from 2.0beta1 to 2.0beta2
General
- uClibc library config changed: UNIX98PTY_ONLY unset
- updated 6wall to version 1.0.1
- updated shorewall to version 1.4.5
- updated busybox to version 1.0.0-pre(cvs)
kernel
- applied soekris and ulog patch
syslinux.cfg
- added "sane" defaults for "syst_size" and "log_size", these are the same as the values in linuxrc
initrd.lrp
- busybox setuid root (chmod 4755), because of "su" problems
- busybox applets removed
- update, this is for 2.0 kernels
- dutmp
- busybox applets added
root.lrp
- removed logger (in busybox now)
- removed "w" from POSIXness, it's an alias now
- removed "last" from POSIXness, a busybox applet now
etc.lrp
- removed the call to update in /etc/init.d/single and /etc/init.d/checkroot.sh
- removed ospfmon alias from /etc/profile and added a w="uptime; who" alias
- fixed a small bug in "rmnologin": started in runlevel "S" now. Also simplified the nologin process.
dnscache.lrp
- set env/QUERYLOG to "no" (advertised in lrpcfg as default)
modules.lrp
- removed ne and added natsemi and 8139too NIC drivers
Changes from 1.2 to 2.0-beta1
General
- upgraded to uClibc-0.9.20
- upgraded to busybox-0.61 pre (CVS version)
- ipv6 support
- use lrpkg.cfg instead of defining the packages in syslinux.cfg
- splitted lrpkg/lrcfg from root.lrp, now in seperate config.lrp package
- updated some sources
root.lrp
- libm library removed, seperate package now
- clock symlink removed (obsolete and doesn't work with bb hwclock)
- icmpinfo removed
- logger added (can't choose bb logger in bb config without bb syslogd)
- df workaround removed, solved in busybox-0.61 now
- used the "usagi" netkit-inetd, this one supports ipv6
- added the libnsl stub library
- removed all lrcfg POSIXness scripts and lrpkg files (in seperate package now)
- tcp-wrappers compiled with ipv6 support
- upgraded to sysvinit_2.85-4.1
- removed tinylogin, it's part of busybox now
initrd.lrp
- config option (initrd size) moved to config.lrp
- busybox applets added
- ping6
- nslookup
- hwclock (replaces hwclock from root.lrp)
- netstat (ipv6 enabled)
- fdformat (replaces fdformat from root.lrp)
- tinylogin applets (replaces tinylogin from root.lrp)
ppp/pppoe.lrp
- compiled with ipv6 support
dnscache.lrp
etc.lrp
- added an ipv6 forwarding option to the networking script
New packages in base
1.2.x
Changes from Bering-uClibc 1.2 to Bering-uClibc 1.2.1
kernel
- applied soekris and ulog patch
shorwall.lrp
Changes from Bering-uClibc 1.1.1 to Bering-uClibc 1.2
Bugs
- root.lrp: bug in df corrected, arguments were ignored
General
- changed version number to 1.2
- updated various help files
- 2.4.20 kernel patched with grsecurity 1.9.9h, ebtables (v2.0.003) and br-nf (v0.0.10) patches
pump.lrp
- updated to version 0.8.14-2
- /etc/pump.shorewall modified. It doesn't start Shorewall anymore since /etc/init.d/shorewall is doing it
iptables.lrp
ulogd.lrp
etc.lrp
- sysklogd now starts from /etc/rcS.d. Otherwise initial pump output was not logged to debug. As a consequence hostname.sh is also being started in /etc/rcS.d
initrd.lrp
- new devices now created: par[0,..,2], lp[0,..,2], ttySLT and net/tun
shorwall.lrp
- updated to version 1.4.3a
1.1.x
Changes from Bering-uClibc 1.1 to Bering-uClibc 1.1.1
Bugs
- ulogd.lrp: added cron.weekly script for log rotating ulogd.log
General
- changed version number to 1.1.1
root.lrp
- new tcp-wrappers source, tcpd and libwrap splitted
- removed "printenv" from POSIXness, POSIXness.system and root.pn.links. busybox "env" has the same purpose.
weblet.lrp
- added parsefw to show the shorewall (netfilter) logfiles and display them in a pretty format similar to the old ipchains format.
Changes from Bering-uClibc 1.0 to Bering-uClibc 1.1
Bugs
- Applied ash patch so that "test" is working correctly with uClibc.
General
- Added ulogd.lrp to standard image (also added in syslinux.cfg).
- Added workaround for busybox df.
- Changed version number to 1.1.
- Upgraded to kernel-2.4.20 with latest grsecurity patch (1.9.9c).
- Upgraded to modules-2.4.20.
- Upgraded to shorewall-1.3.14.
- Upgraded to iptables-1.2.7a + grsecurity patch.
- weblet.lrp updated to work with ulogd and new syslog.conf.
- Upgraded to tinylogin-1.4.
- Backport /etc/TZ support from uClibc-0.9.16.
- Removed ls color option.
pump.lrp
- Removed etc/default/pump, not used anymore.
- Removed the lines etc/default/pump and etc/init.d/pump from pump.conf.
- Removed the line etc/default/pump from pump.list.
initrd.lrp
- Removed df from root.bb.links (df bug workaround).
root.lrp
- Changed root.sys.conf to edit /etc/TZ instead of /etc/tzvalue.
- Added df script (df bug workaround).
etc.lrp
- Removed /etc/network/spoof-protect, obsolete (only for pre 2.2 kernels).
- Removed call to spoof-protect from /etc/init.d/networking. Removed /etc/checksecurity.conf, used by checksecurity.sh (which is not provided)
- Removed /etc/login.access, not used by tinylogin.
- Removed /etc/wtmplock, obsolete.
- Removed /etc/ftpusers, not needed.
- In /etc/init.d/rcS: changed line "see if the system..." to: "create wtmp file".
- In /etc/init.d/umountfs: removed the comented out "swapoff" and "remount" statements.
- In /etc/init.d/mountall.sh: removed the commented out "swapon" statements.
- In /etc/init.d/halt: changed startlevel to Debian standard (0,S90).
- In /etc/init.d/reboot: changed startlevel to Debian standard (6,S90).
- In /etc/init.d/single: changed startlevel to Debian standard (1,S20).
- In /etc/init.d/hwclock: commented out dangerous setting "hwclock --adjust".
- In /etc/init.d/networking: changed S->K in stoplevel 0 and 6.
- In /etc/default/rcS: removed obsolete TMPTIME and FSCKFIX.
- Removed 'echo $prog' debug message from /etc/cron.daily/multicron-d.
- Removed /etc/tzvalue and sourcing in /etc/init.s/hwclock, this doesn't work.
- Added /etc/TZ.
- New syslog.conf and upgraded lrp.conf
- No kern.log (syslog and messages provide these logging).
- Commented out pslave.log.
- No redundancy between messages, syslog and kern.log.
- Option: debug mode on virtual console.
tc.lrp
- Patched to work with HTB in kernel 2.4.20.
dhcpcd.lrp
- Added newline to dhcpd.exclude.list.
ipsec.lrp
- NAT traversal, notify_delete patch and x509 patches added.
- Ipsec509.lrp is gone.
1.0.x
Changes from Bering-uClibc_1.0.2 to Bering-uClibc_1.0.3
Bugs
- fix for ash compiled against uClibc; solves also problems with weblet.lrp (backport from Bering-uClibc-1.1)
Changes from Bering-uClibc_1.0.1 to Bering-uClibc_1.0.2
Bugs
- TZ bug solved by applying new patch to uClibc-0.9.15 (backport from uClibc-0.9.16)
- added newline to dhcpd.exclude.list
General
- changed version number to 1.0.2
- upgrade to tinylogin-1.4
- removed ls color option due to better readability and saves 400b.
etc.lrp
- removed /etc/tzvalue and sourcing from /etc/init.d/hwclock, this don't work
- added /etc/TZ
root.lrp
- changed root.sys.conf to edit TZ instead of tzvalue
Changes from Bering-uClibc_1.0-stable to Bering-uClibc_1.0.1
General
- changed version number to 1.0.1
- upgraded to shorewall-1.3.12
- weblet updated to work with ulogd
pump.lrp
- removed etc/default/pump, not used anymore
- removed the lines etc/default/pump and etc/init.d/pump from pump.conf
- removed the line etc/default/pump from pump.list
etc.lrp
- removed /etc/network/spoof-protect, obsolete (only for pre 2.2 kernels)
- removed call to spoof-protect from /etc/init.d/networking
- removed /etc/checksecurity.conf, used by checksecurity.sh (which is not provided)
- removed /etc/login.access, not used by tinylogin
- removed /etc/wtmplock, obsolete
- removed /etc/ftpusers, not needed
- in /etc/init.d/rcS: changed line "see if the system..." to: "create wtmp file"
- in /etc/init.d/umountfs: removed the comented out "swapoff" and "remount" statements
- in /etc/init.d/mountall.sh: removed the commented out "swapon" statements
- in /etc/init.d/halt: changed startlevel to Debian standard (0,S90)
- in /etc/init.d/reboot: changed startlevel to Debian standard (6,S90)
- in /etc/init.d/single: changed startlevel to Debian standard (1,S20)
- in /etc/init.d/hwclock: commented out dangerous setting "hwclock --adjust"
- removed 'echo $prog' debug message from /etc/cron.daily/multicron-d
New syslog.conf and upgraded lrp.conf
- no kern.log (syslog and messages provide these logging)
- commented out pslave.log
- no redundancy between messages, syslog and kern.log
- option: debug mode on virtual console
- added shorewall.log in lrp.conf
Changes from Bering-uClibc_1.0-stable to Bering-uClibc_1.0-stable
none
Changes from Bering_1.0-stable_uClibc-rc1 to Bering_1.0-stable_uClibc-rc2
initrd.lrp, root.lrp:
- Applied timezone patch to uClibc-0.9.15, because of some problems with ipsec509.
Changes from Bering_rc4_uClibc_rc1 to Bering_1.0-stable_uClibc-rc1
General:
- Brought in sync with Bering_1.0-stable:
- upgraded root.lrp (typo corrected in lrcfg.back.script. Partial backups should now work OK)
- upgraded initrd.lrp (/dev/nftla added to root.mount to fix a problem when trying to boot from DoC)
- upgraded readme (changed to 1.0-stable)
- upgraded syslinux.dpy (changed to 1.0-stable uClibc-0.9.15)
- upgraded linux (freeswan-1.99/ipsec patches)
- upgraded modules.lrp (Bering_1.0-stable)
- upgraded shorwall.lrp (version-1.3.10)
- upgraded freeswan/ipsec to version 1.99
initrd.lrp:
- Applied patch to uClibc-0.9.15, the login bug is gone now.
- Removed the hack from root.dev.mk (in sync with Bering_1.0-stable again)
etc.lrp:
- Added "dmesg -n 3" to /etc/init.d/bootmisc.sh to stop shorewall logging to console.
Changes from Bering_rc4 to Bering_rc4_uClibc_rc1:
General:
- Recompiled all programs against uClib-0.9.15
- Upgraded to syslinux-1.76
initrd.lrp:
- Upgraded to Busybox-0.60.5
- Replaced Glibc-2.07 libraries with uClibc libraries
- initrd.list: changed the list of libraries to reflect the /lib changes
- root.dev.mk: comment out the symlinks to fd/0, fd/1 and fd/2 for now. There is probably a small bug in the combination uClibc/tmpfs.
- busybox: add the applets lsmod and whoami (also removed from Posixness). Removed pidof, pidof is allready a symlink to killal5 so redundant.
- root.bb.links: Bring in sync with the busybox changes.
- root.version: changed to V1.0-rc4 uClibc-0.9.15
root.lrp:
- Replaced Glibc-2.07 libraries with uClibc libraries and added the libm library
- Cleaned POSIXness.system: use the busybox applets where possible, and remove dead links
- Cleaned POSIXness, removed all obsolete and dead links
- Make reboot a symlink to halt instead of a renamed halt.
- Bring root.pn.links in sync with the POSIXness script changes.
- tinylogin: adduser, deluser, addgroup, delgroup and su added (and removed the partial or not functioning implementations from POSIXness)
- root.log.links: updated to reflect the changes in tinylogin.
- Upgraded to sysklogd-1.4.1-10, older versions don't function with the latest uClibc
- Upgraded to sysvinit-2.84-3
etc.lrp:
- Removed /etc/localtime, /etc/nsswitch.conf and /etc/hosts.conf.uClibc doesn't use them.
- Commented out ctrlaltdel in /etc/inittab, you don't want to bring your router/firewall down with the "three finger salute"
dhcpd.lrp:
- Upgraded to dhcp_2.0pl5-14.
- Changed the /etc/dhcpd/* files to the Debian standards and changed the /var/lib/lrpkg/* files to reflect the changes. Newer dhcpd need those changes.
- Created on 2004-05-15 09:33:29 by mhnoyes
- Updated on 2009-05-07 08:43:04 by kapeka
|