[redhat] New configs in net/netfilter

CKI ARK Botrequested to merge
configs/2021-04-30/net/netfilter into os-build

Hi,

As part of the ongoing rebase effort, the following configuration options need to be reviewed.

As a reminder, the ARK configuration flow involves moving unreviewed configuration options from the pending directory to the ark directory. In the diff below, options are removed from the pending directory and added to the ark hierarchy. The final options that need to be ACKed are the files that are being added to the ark hierarchy.

If the value for a file that is added should be changed, please reply with a better option.

CONFIG_NETFILTER_XTABLES_COMPAT:

This option provides a translation layer to run 32bit arp,ip(6),ebtables binaries on 64bit kernels.

If unsure, say N.

Symbol: NETFILTER_XTABLES_COMPAT [=y] Type : bool Defined at net/netfilter/Kconfig:731 Prompt: Netfilter Xtables 32bit support Depends on: NET [=y] && INET [=y] && NETFILTER [=y] && NETFILTER_XTABLES [=y] && COMPAT [=y] Location: -> Networking support (NET [=y]) -> Networking options -> Network packet filtering framework (Netfilter) (NETFILTER [=y]) -> Core Netfilter Configuration -> Netfilter Xtables support (required for ip_tables) (NETFILTER_XTABLES [=y])

CONFIG_NF_LOG_SYSLOG:

This option enable support for packet logging via syslog. It supports IPv4, IPV6, ARP and common transport protocols such as TCP and UDP. This is a simpler but less flexible logging method compared to CONFIG_NETFILTER_NETLINK_LOG. If both are enabled the backend to use can be configured at run-time by means of per-address-family sysctl tunables.

Symbol: NF_LOG_SYSLOG [=m] Type : tristate Defined at net/netfilter/Kconfig:74 Prompt: Syslog packet logging Depends on: NET [=y] && INET [=y] && NETFILTER [=y] Location: -> Networking support (NET [=y]) -> Networking options -> Network packet filtering framework (Netfilter) (NETFILTER [=y]) -> Core Netfilter Configuration Selected by [m]:

  • NETFILTER_XT_TARGET_LOG [=m] && NET [=y] && INET [=y] && NETFILTER [=y] && NETFILTER_XTABLES [=y]
  • NF_LOG_ARP [=m] && NET [=y] && INET [=y] && NETFILTER [=y]
  • NF_LOG_IPV4 [=m] && NET [=y] && INET [=y] && NETFILTER [=y]
  • NF_LOG_IPV6 [=m] && NET [=y] && INET [=y] && IPV6 [=y] && NETFILTER [=y]

Cc: Florian Westphal fwestpha@redhat.com Cc: Jiri Benc jbenc@redhat.com Cc: Marcelo Leitner mleitner@redhat.com Cc: Antoine Tenart atenart@redhat.com Cc: Balazs Nemeth bnemeth@redhat.com Cc: Davide Caratti dcaratti@redhat.com Cc: Eric Garver egarver@redhat.com Cc: Flavio Leitner fbl@redhat.com Cc: Guillaume Nault gnault@redhat.com Cc: Hangbin Liu haliu@redhat.com Cc: Ivan Vecera ivecera@redhat.com Cc: Jarod Wilson jarod@redhat.com Cc: Lorenzo Bianconi lorenzo.bianconi@redhat.com Cc: Paolo Abeni pabeni@redhat.com Cc: Phil Sutter psutter@redhat.com Cc: Sabrina Dubroca sdubroca@redhat.com Cc: Stefano Brivio sbrivio@redhat.com Cc: Xin Long lxin@redhat.com Signed-off-by: Fedora Kernel Team kernel-team@fedoraproject.org

Merge request reports