ARM: tizen_odroid_defconfig: enableCONFIG_NETFILTER_XT_TARGET_SECMARK 00/100200/2
authorjooseong lee <jooseong.lee@samsung.com>
Fri, 25 Nov 2016 08:46:54 +0000 (17:46 +0900)
committerSeung-Woo Kim <sw0312.kim@samsung.com>
Mon, 28 Nov 2016 05:53:47 +0000 (21:53 -0800)
The config allows security marking of network packets.
Iptable need to set packet's secmark to 'System' label to avoid
Smack deny issue only for multicast address range.

* Refer to : https://review.tizen.org/gerrit/#/c/100096/

Change-Id: If0dcf494197beb7eb5ae035e0998ac2c8907d0cc
Signed-off-by: jooseong lee <jooseong.lee@samsung.com>
arch/arm/configs/tizen_odroid_defconfig

index 3457c4ef0c56cca730072d346fd40883352db959..3019af13040964402879271cdd0e20d404dd0d23 100644 (file)
@@ -864,7 +864,7 @@ CONFIG_NETFILTER_XT_TARGET_REDIRECT=y
 # CONFIG_NETFILTER_XT_TARGET_TEE is not set
 # CONFIG_NETFILTER_XT_TARGET_TPROXY is not set
 # CONFIG_NETFILTER_XT_TARGET_TRACE is not set
-# CONFIG_NETFILTER_XT_TARGET_SECMARK is not set
+CONFIG_NETFILTER_XT_TARGET_SECMARK=y
 CONFIG_NETFILTER_XT_TARGET_TCPMSS=y
 # CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP is not set