From: jooseong lee Date: Mon, 28 Nov 2016 05:52:17 +0000 (+0900) Subject: ARM: tizen_tm1_defconfig: enable CONFIG_NETFILTER_XT_TARGET_SECMARK X-Git-Tag: accepted/tizen/mobile/20161205.232636~1 X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=refs%2Fchanges%2F13%2F100413%2F1;p=profile%2Fmobile%2Fplatform%2Fkernel%2Flinux-3.10-sc7730.git ARM: tizen_tm1_defconfig: enable CONFIG_NETFILTER_XT_TARGET_SECMARK The config allows security marking of network packets. Iptable need to set packet's secmark to 'System' label to avoid Smack deny issue only for multicast address range. * Refer to : https://review.tizen.org/gerrit/#/c/100096/ Change-Id: Ia2902525a76d31a9db6d4665b4b488f4a4c45b22 Signed-off-by: jooseong lee --- diff --git a/arch/arm/configs/tizen_tm1_defconfig b/arch/arm/configs/tizen_tm1_defconfig index c4bd6dc..0f0df57 100755 --- a/arch/arm/configs/tizen_tm1_defconfig +++ b/arch/arm/configs/tizen_tm1_defconfig @@ -759,7 +759,7 @@ CONFIG_NETFILTER_XT_TARGET_REDIRECT=y # CONFIG_NETFILTER_XT_TARGET_TEE is not set CONFIG_NETFILTER_XT_TARGET_TPROXY=y CONFIG_NETFILTER_XT_TARGET_TRACE=y -# CONFIG_NETFILTER_XT_TARGET_SECMARK is not set +CONFIG_NETFILTER_XT_TARGET_SECMARK=y # CONFIG_NETFILTER_XT_TARGET_TCPMSS is not set # CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP is not set