From: Florian Westphal Date: Thu, 16 Mar 2023 12:59:48 +0000 (+0100) Subject: netfilter: xtables: disable 32bit compat interface by default X-Git-Tag: v6.6.17~4755^2~256^2~2 X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=bde7170a04d69ab8013d0582e60e414d46d46dd6;p=platform%2Fkernel%2Flinux-rpi.git netfilter: xtables: disable 32bit compat interface by default This defaulted to 'y' because before this knob existed the 32bit compat layer was always compiled in if CONFIG_COMPAT was set. 32bit iptables on 64bit kernel isn't common anymore, so remove the default-y now. Signed-off-by: Florian Westphal --- diff --git a/net/netfilter/Kconfig b/net/netfilter/Kconfig index 4d67371..d0bf630 100644 --- a/net/netfilter/Kconfig +++ b/net/netfilter/Kconfig @@ -753,7 +753,6 @@ if NETFILTER_XTABLES config NETFILTER_XTABLES_COMPAT bool "Netfilter Xtables 32bit support" depends on COMPAT - default y help This option provides a translation layer to run 32bit arp,ip(6),ebtables binaries on 64bit kernels.