From: jooseong lee Date: Fri, 25 Nov 2016 08:48:58 +0000 (+0900) Subject: ARM64: tizen_tm2_defconfig: enable CONFIG_NETFILTER_XT_TARGET_SECMARK X-Git-Tag: submit/tizen/20161205.013353~3 X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=refs%2Fchanges%2F01%2F100201%2F2;p=platform%2Fkernel%2Flinux-exynos.git ARM64: tizen_tm2_defconfig: enable CONFIG_NETFILTER_XT_TARGET_SECMARK The config allows security marking of network packets. Iptable need to set packet's secmark to 'System' label to avoid Smack deny issue only for multicast address range. * Refer to : https://review.tizen.org/gerrit/#/c/100096/ Change-Id: I28dce71862d2bddba2ede2f72b7cdd493c3d184f Signed-off-by: jooseong lee --- diff --git a/arch/arm64/configs/tizen_tm2_defconfig b/arch/arm64/configs/tizen_tm2_defconfig index cbe03d975400..a745fd84ba20 100644 --- a/arch/arm64/configs/tizen_tm2_defconfig +++ b/arch/arm64/configs/tizen_tm2_defconfig @@ -709,7 +709,7 @@ CONFIG_NETFILTER_XT_TARGET_REDIRECT=y # CONFIG_NETFILTER_XT_TARGET_TEE is not set # CONFIG_NETFILTER_XT_TARGET_TPROXY is not set # CONFIG_NETFILTER_XT_TARGET_TRACE is not set -# CONFIG_NETFILTER_XT_TARGET_SECMARK is not set +CONFIG_NETFILTER_XT_TARGET_SECMARK=y # CONFIG_NETFILTER_XT_TARGET_TCPMSS is not set # CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP is not set