From: jooseong lee Date: Fri, 25 Nov 2016 08:46:54 +0000 (+0900) Subject: ARM: tizen_odroid_defconfig: enableCONFIG_NETFILTER_XT_TARGET_SECMARK X-Git-Tag: submit/tizen_3.0/20161205.010713~1 X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=66c301a31be579e6036a9244667339f6d2b27afd;p=platform%2Fkernel%2Flinux-exynos.git ARM: tizen_odroid_defconfig: enableCONFIG_NETFILTER_XT_TARGET_SECMARK The config allows security marking of network packets. Iptable need to set packet's secmark to 'System' label to avoid Smack deny issue only for multicast address range. * Refer to : https://review.tizen.org/gerrit/#/c/100096/ Change-Id: If0dcf494197beb7eb5ae035e0998ac2c8907d0cc Signed-off-by: jooseong lee --- diff --git a/arch/arm/configs/tizen_odroid_defconfig b/arch/arm/configs/tizen_odroid_defconfig index ec4d163602d9..3be92c0ae76d 100644 --- a/arch/arm/configs/tizen_odroid_defconfig +++ b/arch/arm/configs/tizen_odroid_defconfig @@ -864,7 +864,7 @@ CONFIG_NETFILTER_XT_TARGET_REDIRECT=y # CONFIG_NETFILTER_XT_TARGET_TEE is not set # CONFIG_NETFILTER_XT_TARGET_TPROXY is not set # CONFIG_NETFILTER_XT_TARGET_TRACE is not set -# CONFIG_NETFILTER_XT_TARGET_SECMARK is not set +CONFIG_NETFILTER_XT_TARGET_SECMARK=y CONFIG_NETFILTER_XT_TARGET_TCPMSS=y # CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP is not set