diff options
author | jooseong lee <jooseong.lee@samsung.com> | 2016-11-25 17:46:54 +0900 |
---|---|---|
committer | Seung-Woo Kim <sw0312.kim@samsung.com> | 2016-12-14 13:53:36 +0900 |
commit | a681e09249371d55ee01b919eb2767f713ebc1ec (patch) | |
tree | 367ccb192c5a525a4bcb4c6788c15bf81a9dd193 /arch | |
parent | 3b39f0b0094a28c0a012be451206971ab2eea512 (diff) |
ARM: tizen_odroid_defconfig: enableCONFIG_NETFILTER_XT_TARGET_SECMARK
The config allows security marking of network packets.
Iptable need to set packet's secmark to 'System' label to avoid
Smack deny issue only for multicast address range.
* Refer to : https://review.tizen.org/gerrit/#/c/100096/
Change-Id: If0dcf494197beb7eb5ae035e0998ac2c8907d0cc
Signed-off-by: jooseong lee <jooseong.lee@samsung.com>
Diffstat (limited to 'arch')
-rw-r--r-- | arch/arm/configs/tizen_odroid_defconfig | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/arch/arm/configs/tizen_odroid_defconfig b/arch/arm/configs/tizen_odroid_defconfig index 561474ed7d29..4274c8e16368 100644 --- a/arch/arm/configs/tizen_odroid_defconfig +++ b/arch/arm/configs/tizen_odroid_defconfig @@ -864,7 +864,7 @@ CONFIG_NETFILTER_XT_TARGET_REDIRECT=y # CONFIG_NETFILTER_XT_TARGET_TEE is not set # CONFIG_NETFILTER_XT_TARGET_TPROXY is not set # CONFIG_NETFILTER_XT_TARGET_TRACE is not set -# CONFIG_NETFILTER_XT_TARGET_SECMARK is not set +CONFIG_NETFILTER_XT_TARGET_SECMARK=y CONFIG_NETFILTER_XT_TARGET_TCPMSS=y # CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP is not set |