From 7bdd10d2024e6ee01cd7b7048bb1245c41fbd9e3 Mon Sep 17 00:00:00 2001 From: jooseong lee Date: Fri, 25 Nov 2016 17:48:58 +0900 Subject: [PATCH] ARM64: tizen_tm2_defconfig: enable CONFIG_NETFILTER_XT_TARGET_SECMARK The config allows security marking of network packets. Iptable need to set packet's secmark to 'System' label to avoid Smack deny issue only for multicast address range. * Refer to : https://review.tizen.org/gerrit/#/c/100096/ Change-Id: I28dce71862d2bddba2ede2f72b7cdd493c3d184f Signed-off-by: jooseong lee --- arch/arm64/configs/tizen_tm2_defconfig | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/arch/arm64/configs/tizen_tm2_defconfig b/arch/arm64/configs/tizen_tm2_defconfig index cbe03d9..a745fd8 100644 --- a/arch/arm64/configs/tizen_tm2_defconfig +++ b/arch/arm64/configs/tizen_tm2_defconfig @@ -709,7 +709,7 @@ CONFIG_NETFILTER_XT_TARGET_REDIRECT=y # CONFIG_NETFILTER_XT_TARGET_TEE is not set # CONFIG_NETFILTER_XT_TARGET_TPROXY is not set # CONFIG_NETFILTER_XT_TARGET_TRACE is not set -# CONFIG_NETFILTER_XT_TARGET_SECMARK is not set +CONFIG_NETFILTER_XT_TARGET_SECMARK=y # CONFIG_NETFILTER_XT_TARGET_TCPMSS is not set # CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP is not set -- 2.7.4