From: jooseong lee Date: Fri, 25 Nov 2016 08:46:54 +0000 (+0900) Subject: ARM: tizen_odroid_defconfig: enableCONFIG_NETFILTER_XT_TARGET_SECMARK X-Git-Tag: submit/tizen/20161216.052309~118 X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=a681e09249371d55ee01b919eb2767f713ebc1ec;p=platform%2Fkernel%2Flinux-exynos.git ARM: tizen_odroid_defconfig: enableCONFIG_NETFILTER_XT_TARGET_SECMARK The config allows security marking of network packets. Iptable need to set packet's secmark to 'System' label to avoid Smack deny issue only for multicast address range. * Refer to : https://review.tizen.org/gerrit/#/c/100096/ Change-Id: If0dcf494197beb7eb5ae035e0998ac2c8907d0cc Signed-off-by: jooseong lee --- diff --git a/arch/arm/configs/tizen_odroid_defconfig b/arch/arm/configs/tizen_odroid_defconfig index 561474ed7d29..4274c8e16368 100644 --- a/arch/arm/configs/tizen_odroid_defconfig +++ b/arch/arm/configs/tizen_odroid_defconfig @@ -864,7 +864,7 @@ CONFIG_NETFILTER_XT_TARGET_REDIRECT=y # CONFIG_NETFILTER_XT_TARGET_TEE is not set # CONFIG_NETFILTER_XT_TARGET_TPROXY is not set # CONFIG_NETFILTER_XT_TARGET_TRACE is not set -# CONFIG_NETFILTER_XT_TARGET_SECMARK is not set +CONFIG_NETFILTER_XT_TARGET_SECMARK=y CONFIG_NETFILTER_XT_TARGET_TCPMSS=y # CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP is not set