ARM: tizen_tm1_defconfig: enable CONFIG_NETFILTER_XT_TARGET_SECMARK 13/100413/1
authorjooseong lee <jooseong.lee@samsung.com>
Mon, 28 Nov 2016 05:52:17 +0000 (14:52 +0900)
committerjooseong lee <jooseong.lee@samsung.com>
Mon, 28 Nov 2016 05:52:17 +0000 (14:52 +0900)
The config allows security marking of network packets.
Iptable need to set packet's secmark to 'System' label to avoid
Smack deny issue only for multicast address range.

* Refer to : https://review.tizen.org/gerrit/#/c/100096/

Change-Id: Ia2902525a76d31a9db6d4665b4b488f4a4c45b22
Signed-off-by: jooseong lee <jooseong.lee@samsung.com>
arch/arm/configs/tizen_tm1_defconfig

index c4bd6dc..0f0df57 100755 (executable)
@@ -759,7 +759,7 @@ CONFIG_NETFILTER_XT_TARGET_REDIRECT=y
 # CONFIG_NETFILTER_XT_TARGET_TEE is not set
 CONFIG_NETFILTER_XT_TARGET_TPROXY=y
 CONFIG_NETFILTER_XT_TARGET_TRACE=y
-# CONFIG_NETFILTER_XT_TARGET_SECMARK is not set
+CONFIG_NETFILTER_XT_TARGET_SECMARK=y
 # CONFIG_NETFILTER_XT_TARGET_TCPMSS is not set
 # CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP is not set