Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>

Fix the init script to allow access from IPv6 subnets of the interface
specified in allow section in /etc/config/chrony.

Fixes issue #7039.

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>

Don't use the Nettle library (or NSS, libtomcrypt) even if it is
available.

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>

A + sign does not have meaning in build depends.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>

Else the system will always stay in UNSYNC state.
Even if there is no real RTC.
See chrony minimal config:
http://chrony.tuxfamily.org/faq.html#_what_is_the_minimum_recommended_configuration_for_an_ntp_client

Signed-off-by: Stefan Sydow <st@metafly.info>

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>

Fixes CVE-2016-1567.

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>

- fix the init script to read the right config
- rework the init script to allow reusing its code in the hotplug script
- find wan interfaces in the hotplug script instead of using hardcoded
  name and set the online/offline status separately for IPv4/IPv6
- allow NTP access on interfaces that are configured after chronyd start
- add NTP servers obtained from DHCP, options are specified in a new
  dhcp_ntp_server config section
- start chronyd before the network service, include a patch to always
  have IP_FREEBIND defined, which seems to be missing with uclibc

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>

Support for authentication with command key was replaced with
communication over Unix domain socket.

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>