mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/chenhuacai/linux-loongson
synced 2025-08-27 06:50:37 +00:00
fd72f265bb
The DCCP socket family has now been removed from this tree, see:
8bb3212be4 ("Merge branch 'net-retire-dccp-socket'")
Remove connection tracking and NAT support for this protocol, this
should not pose a problem because no DCCP traffic is expected to be seen
on the wire.
As for the code for matching on dccp header for iptables and nftables,
mark it as deprecated and keep it in place. Ruleset restoration is an
atomic operation. Without dccp matching support, an astray match on dccp
could break this operation leaving your computer with no policy in
place, so let's follow a more conservative approach for matches.
Add CONFIG_NFT_EXTHDR_DCCP which is set to 'n' by default to deprecate
dccp extension support. Similarly, label CONFIG_NETFILTER_XT_MATCH_DCCP
as deprecated too and also set it to 'n' by default.
Code to match on DCCP protocol from ebtables also remains in place, this
is just a few checks on IPPROTO_DCCP from _check() path which is
exercised when ruleset is loaded. There is another use of IPPROTO_DCCP
from the _check() path in the iptables multiport match. Another check
for IPPROTO_DCCP from the packet in the reject target is also removed.
So let's schedule removal of the dccp matching for a second stage, this
should not interfer with the dccp retirement since this is only matching
on the dccp header.
Cc: "David S. Miller" <davem@davemloft.net>
Cc: Eric Dumazet <edumazet@google.com>
Cc: Jakub Kicinski <kuba@kernel.org>
Cc: Paolo Abeni <pabeni@redhat.com>
Cc: Kuniyuki Iwashima <kuniyu@amazon.com>
Reviewed-by: Simon Horman <horms@kernel.org>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
220 lines
4.9 KiB
Plaintext
220 lines
4.9 KiB
Plaintext
CONFIG_LOCALVERSION="-fuloong2e"
|
|
# CONFIG_LOCALVERSION_AUTO is not set
|
|
CONFIG_SYSVIPC=y
|
|
CONFIG_POSIX_MQUEUE=y
|
|
CONFIG_NO_HZ=y
|
|
CONFIG_HIGH_RES_TIMERS=y
|
|
CONFIG_PREEMPT_VOLUNTARY=y
|
|
CONFIG_BSD_PROCESS_ACCT=y
|
|
CONFIG_IKCONFIG=y
|
|
CONFIG_IKCONFIG_PROC=y
|
|
CONFIG_LOG_BUF_SHIFT=14
|
|
CONFIG_NAMESPACES=y
|
|
CONFIG_USER_NS=y
|
|
CONFIG_EXPERT=y
|
|
# CONFIG_COMPAT_BRK is not set
|
|
CONFIG_PROFILING=y
|
|
CONFIG_MACH_LOONGSON2EF=y
|
|
CONFIG_PCI=y
|
|
CONFIG_MIPS32_O32=y
|
|
CONFIG_MIPS32_N32=y
|
|
# CONFIG_SUSPEND is not set
|
|
CONFIG_HIBERNATION=y
|
|
CONFIG_PM_STD_PARTITION="/dev/sda3"
|
|
CONFIG_MODULES=y
|
|
CONFIG_MODULE_UNLOAD=y
|
|
CONFIG_MODULE_FORCE_UNLOAD=y
|
|
CONFIG_PARTITION_ADVANCED=y
|
|
CONFIG_BINFMT_MISC=y
|
|
CONFIG_NET=y
|
|
CONFIG_PACKET=y
|
|
CONFIG_UNIX=y
|
|
CONFIG_INET=y
|
|
CONFIG_IP_MULTICAST=y
|
|
CONFIG_IP_PNP=y
|
|
CONFIG_IP_PNP_BOOTP=y
|
|
CONFIG_NET_IPIP=m
|
|
# CONFIG_INET_DIAG is not set
|
|
# CONFIG_IPV6 is not set
|
|
CONFIG_NETFILTER=y
|
|
CONFIG_NETFILTER_NETLINK_LOG=m
|
|
CONFIG_NETFILTER_XT_TARGET_CLASSIFY=m
|
|
CONFIG_NETFILTER_XT_TARGET_MARK=m
|
|
CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m
|
|
CONFIG_NETFILTER_XT_TARGET_TRACE=m
|
|
CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP=m
|
|
CONFIG_NETFILTER_XT_MATCH_COMMENT=m
|
|
CONFIG_NETFILTER_XT_MATCH_ESP=m
|
|
CONFIG_NETFILTER_XT_MATCH_IPRANGE=m
|
|
CONFIG_NETFILTER_XT_MATCH_LENGTH=m
|
|
CONFIG_NETFILTER_XT_MATCH_LIMIT=m
|
|
CONFIG_NETFILTER_XT_MATCH_MAC=m
|
|
CONFIG_NETFILTER_XT_MATCH_MARK=m
|
|
CONFIG_NETFILTER_XT_MATCH_MULTIPORT=m
|
|
CONFIG_NETFILTER_XT_MATCH_OWNER=m
|
|
CONFIG_NETFILTER_XT_MATCH_PKTTYPE=m
|
|
CONFIG_NETFILTER_XT_MATCH_QUOTA=m
|
|
CONFIG_NETFILTER_XT_MATCH_RATEEST=m
|
|
CONFIG_NETFILTER_XT_MATCH_REALM=m
|
|
CONFIG_NETFILTER_XT_MATCH_RECENT=m
|
|
CONFIG_NETFILTER_XT_MATCH_SCTP=m
|
|
CONFIG_NETFILTER_XT_MATCH_STATISTIC=m
|
|
CONFIG_NETFILTER_XT_MATCH_STRING=m
|
|
CONFIG_NETFILTER_XT_MATCH_TCPMSS=m
|
|
CONFIG_NETFILTER_XT_MATCH_TIME=m
|
|
CONFIG_NETFILTER_XT_MATCH_U32=m
|
|
CONFIG_IP_NF_IPTABLES=m
|
|
CONFIG_IP_NF_MATCH_AH=m
|
|
CONFIG_IP_NF_MATCH_ECN=m
|
|
CONFIG_IP_NF_MATCH_TTL=m
|
|
CONFIG_IP_NF_FILTER=m
|
|
CONFIG_IP_NF_TARGET_REJECT=m
|
|
CONFIG_IP_NF_MANGLE=m
|
|
CONFIG_IP_NF_TARGET_ECN=m
|
|
CONFIG_IP_NF_TARGET_TTL=m
|
|
CONFIG_IP_NF_RAW=m
|
|
CONFIG_IP_NF_ARPTABLES=m
|
|
CONFIG_IP_NF_ARPFILTER=m
|
|
CONFIG_IP_NF_ARP_MANGLE=m
|
|
CONFIG_PHONET=m
|
|
CONFIG_NET_9P=m
|
|
CONFIG_FW_LOADER=m
|
|
CONFIG_MTD=m
|
|
CONFIG_MTD_BLOCK=m
|
|
CONFIG_MTD_CFI=m
|
|
CONFIG_MTD_JEDECPROBE=m
|
|
CONFIG_MTD_CFI_ADV_OPTIONS=y
|
|
CONFIG_MTD_CFI_AMDSTD=m
|
|
CONFIG_MTD_CFI_STAA=m
|
|
CONFIG_MTD_PHYSMAP=m
|
|
CONFIG_BLK_DEV_LOOP=y
|
|
CONFIG_BLK_DEV_RAM=m
|
|
CONFIG_CDROM_PKTCDVD=m
|
|
CONFIG_ATA_OVER_ETH=m
|
|
CONFIG_BLK_DEV_SD=y
|
|
CONFIG_BLK_DEV_SR=y
|
|
CONFIG_CHR_DEV_SG=y
|
|
CONFIG_SCSI_CONSTANTS=y
|
|
# CONFIG_SCSI_LOWLEVEL is not set
|
|
CONFIG_ATA=y
|
|
CONFIG_PATA_VIA=y
|
|
CONFIG_ATA_GENERIC=y
|
|
CONFIG_PATA_LEGACY=y
|
|
CONFIG_NETDEVICES=y
|
|
CONFIG_NET_FC=y
|
|
CONFIG_MACVLAN=m
|
|
CONFIG_VETH=m
|
|
CONFIG_8139TOO=y
|
|
# CONFIG_8139TOO_PIO is not set
|
|
CONFIG_PHYLIB=m
|
|
CONFIG_CICADA_PHY=m
|
|
CONFIG_DAVICOM_PHY=m
|
|
CONFIG_LXT_PHY=m
|
|
CONFIG_MARVELL_PHY=m
|
|
CONFIG_QSEMI_PHY=m
|
|
CONFIG_PPP=m
|
|
CONFIG_PPP_BSDCOMP=m
|
|
CONFIG_PPP_DEFLATE=m
|
|
CONFIG_PPP_FILTER=y
|
|
CONFIG_PPP_MPPE=m
|
|
CONFIG_PPP_MULTILINK=y
|
|
CONFIG_PPPOE=m
|
|
CONFIG_PPP_ASYNC=m
|
|
CONFIG_PPP_SYNC_TTY=m
|
|
CONFIG_SLIP=m
|
|
CONFIG_SLIP_COMPRESSED=y
|
|
CONFIG_SLIP_SMART=y
|
|
CONFIG_SLIP_MODE_SLIP6=y
|
|
CONFIG_INPUT_FF_MEMLESS=y
|
|
CONFIG_MOUSE_SERIAL=y
|
|
CONFIG_SERIAL_8250=y
|
|
CONFIG_SERIAL_8250_CONSOLE=y
|
|
CONFIG_SERIAL_8250_NR_UARTS=2
|
|
CONFIG_SERIAL_8250_RUNTIME_UARTS=2
|
|
CONFIG_HW_RANDOM=y
|
|
CONFIG_I2C=m
|
|
CONFIG_I2C_CHARDEV=m
|
|
CONFIG_I2C_VIAPRO=m
|
|
# CONFIG_HWMON is not set
|
|
CONFIG_FB=y
|
|
CONFIG_FB_RADEON=y
|
|
# CONFIG_FB_RADEON_I2C is not set
|
|
# CONFIG_VGA_CONSOLE is not set
|
|
CONFIG_FRAMEBUFFER_CONSOLE=y
|
|
CONFIG_SOUND=y
|
|
CONFIG_SND=m
|
|
CONFIG_SND_SEQUENCER=m
|
|
CONFIG_SND_SEQ_DUMMY=m
|
|
CONFIG_SND_VIA82XX=m
|
|
CONFIG_HIDRAW=y
|
|
# CONFIG_USB_HID is not set
|
|
CONFIG_HID_PID=y
|
|
CONFIG_USB_KBD=y
|
|
CONFIG_USB_MOUSE=y
|
|
CONFIG_USB=y
|
|
CONFIG_USB_ANNOUNCE_NEW_DEVICES=y
|
|
CONFIG_USB_OTG_PRODUCTLIST=y
|
|
CONFIG_USB_C67X00_HCD=m
|
|
CONFIG_USB_EHCI_HCD=y
|
|
CONFIG_USB_EHCI_ROOT_HUB_TT=y
|
|
CONFIG_USB_OHCI_HCD=y
|
|
CONFIG_USB_UHCI_HCD=m
|
|
CONFIG_USB_R8A66597_HCD=m
|
|
CONFIG_USB_ACM=y
|
|
CONFIG_USB_PRINTER=y
|
|
CONFIG_USB_WDM=m
|
|
CONFIG_USB_TMC=m
|
|
CONFIG_USB_STORAGE=y
|
|
CONFIG_USB_STORAGE_ONETOUCH=y
|
|
CONFIG_USB_STORAGE_CYPRESS_ATACB=y
|
|
CONFIG_USB_ISP1760=m
|
|
CONFIG_USB_SEVSEG=m
|
|
CONFIG_USB_ISIGHTFW=m
|
|
CONFIG_UIO=m
|
|
CONFIG_UIO_CIF=m
|
|
CONFIG_EXT2_FS=y
|
|
CONFIG_EXT3_FS=y
|
|
CONFIG_EXT4_FS_POSIX_ACL=y
|
|
CONFIG_EXT4_FS_SECURITY=y
|
|
CONFIG_AUTOFS_FS=y
|
|
CONFIG_FUSE_FS=y
|
|
CONFIG_ISO9660_FS=m
|
|
CONFIG_JOLIET=y
|
|
CONFIG_ZISOFS=y
|
|
CONFIG_UDF_FS=m
|
|
CONFIG_MSDOS_FS=m
|
|
CONFIG_VFAT_FS=m
|
|
CONFIG_FAT_DEFAULT_CODEPAGE=936
|
|
CONFIG_FAT_DEFAULT_IOCHARSET="utf8"
|
|
CONFIG_NTFS_FS=m
|
|
CONFIG_NTFS_RW=y
|
|
CONFIG_PROC_KCORE=y
|
|
CONFIG_TMPFS=y
|
|
CONFIG_OMFS_FS=m
|
|
CONFIG_NFS_FS=m
|
|
CONFIG_NFS_V3_ACL=y
|
|
CONFIG_NFS_V4=m
|
|
CONFIG_NFSD=m
|
|
CONFIG_NFSD_V3_ACL=y
|
|
CONFIG_NFSD_V4=y
|
|
CONFIG_CIFS=m
|
|
CONFIG_CIFS_STATS2=y
|
|
CONFIG_CIFS_XATTR=y
|
|
CONFIG_CIFS_POSIX=y
|
|
CONFIG_CIFS_DEBUG2=y
|
|
CONFIG_NLS_DEFAULT="utf8"
|
|
CONFIG_NLS_CODEPAGE_936=y
|
|
CONFIG_NLS_ISO8859_1=y
|
|
CONFIG_NLS_UTF8=y
|
|
CONFIG_CRYPTO_AUTHENC=m
|
|
CONFIG_CRYPTO_GCM=m
|
|
CONFIG_CRYPTO_CTS=m
|
|
CONFIG_CRYPTO_PCBC=m
|
|
CONFIG_CRYPTO_XTS=m
|
|
CONFIG_CRYPTO_HMAC=y
|
|
CONFIG_CRYPTO_RMD160=m
|
|
CONFIG_CRYPTO_SEED=m
|
|
CONFIG_CRYPTO_DEFLATE=m
|
|
CONFIG_CRYPTO_LZO=m
|
|
# CONFIG_CRYPTO_HW is not set
|