ARM: tizen_odroid_defconfig: enableCONFIG_NETFILTER_XT_TARGET_SECMARK
authorjooseong lee <jooseong.lee@samsung.com>
Fri, 25 Nov 2016 08:46:54 +0000 (17:46 +0900)
committerSeung-Woo Kim <sw0312.kim@samsung.com>
Mon, 28 Nov 2016 09:31:59 +0000 (18:31 +0900)
The config allows security marking of network packets.
Iptable need to set packet's secmark to 'System' label to avoid
Smack deny issue only for multicast address range.

* Refer to : https://review.tizen.org/gerrit/#/c/100096/

Change-Id: If0dcf494197beb7eb5ae035e0998ac2c8907d0cc
Signed-off-by: jooseong lee <jooseong.lee@samsung.com>
arch/arm/configs/tizen_odroid_defconfig

index ec4d163602d93e4744f8bfe15a9aac2a74102850..3be92c0ae76d0801193272e435023f4b3f9cd8c6 100644 (file)
@@ -864,7 +864,7 @@ CONFIG_NETFILTER_XT_TARGET_REDIRECT=y
 # CONFIG_NETFILTER_XT_TARGET_TEE is not set
 # CONFIG_NETFILTER_XT_TARGET_TPROXY is not set
 # CONFIG_NETFILTER_XT_TARGET_TRACE is not set
-# CONFIG_NETFILTER_XT_TARGET_SECMARK is not set
+CONFIG_NETFILTER_XT_TARGET_SECMARK=y
 CONFIG_NETFILTER_XT_TARGET_TCPMSS=y
 # CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP is not set