Enable kernel options required for security-manager iptables config 86/210986/3 accepted/tizen_5.5_unified_mobile_hotfix tizen_5.5_mobile_hotfix accepted/tizen/5.5/unified/20191031.004528 accepted/tizen/5.5/unified/mobile/hotfix/20201027.060938 accepted/tizen/unified/20190911.111606 submit/tizen/20190910.123110 submit/tizen_5.5/20191031.000009 submit/tizen_5.5_mobile_hotfix/20201026.1851010 submit/tizen_5.5_mobile_hotfix/20201027.114301 tizen_5.5.m2_release
authorLukasz Pawelczyk <l.pawelczyk@samsung.com>
Fri, 26 Jul 2019 14:25:22 +0000 (16:25 +0200)
committerManish Rathod <manish.r@samsung.com>
Tue, 10 Sep 2019 12:13:47 +0000 (12:13 +0000)
security-manager is responsible for the internet privilage using
iptables and the following functionalities are required:

- iptables match owner
- iptables logging
- iptables limiting
- corresponding IPV6 equivalents, incl conntrack

Change-Id: I3ef34a69b8495f4ea0390de601b5623d55df6400

arch/x86/configs/tizen_emul_defconfig

index 59f6a59..f782cac 100644 (file)
@@ -797,6 +797,7 @@ CONFIG_NETFILTER_NETLINK_ACCT=y
 CONFIG_NETFILTER_NETLINK_QUEUE=y
 CONFIG_NETFILTER_NETLINK_LOG=y
 CONFIG_NF_CONNTRACK=y
+CONFIG_NF_LOG_COMMON=y
 # CONFIG_NF_CONNTRACK_MARK is not set
 CONFIG_NF_CONNTRACK_SECMARK=y
 CONFIG_NF_CONNTRACK_PROCFS=y
@@ -955,7 +956,8 @@ CONFIG_NF_DEFRAG_IPV6=y
 CONFIG_NF_CONNTRACK_IPV6=y
 # CONFIG_NF_DUP_IPV6 is not set
 CONFIG_NF_REJECT_IPV6=y
-# CONFIG_NF_LOG_IPV6 is not set
+CONFIG_NF_LOG_IPV6=y
+# CONFIG_NF_NAT_IPV6 is not set
 CONFIG_IP6_NF_IPTABLES=y
 # CONFIG_IP6_NF_MATCH_AH is not set
 # CONFIG_IP6_NF_MATCH_EUI64 is not set
@@ -973,6 +975,7 @@ CONFIG_IP6_NF_TARGET_REJECT=y
 CONFIG_IP6_NF_MANGLE=y
 CONFIG_IP6_NF_RAW=y
 # CONFIG_IP6_NF_SECURITY is not set
+# CONFIG_IP6_NF_NAT is not set
 # CONFIG_BRIDGE_NF_EBTABLES is not set
 # CONFIG_IP_DCCP is not set
 # CONFIG_IP_SCTP is not set