mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/chenhuacai/linux-loongson
synced 2025-08-27 06:50:37 +00:00
fd72f265bb
The DCCP socket family has now been removed from this tree, see:
8bb3212be4 ("Merge branch 'net-retire-dccp-socket'")
Remove connection tracking and NAT support for this protocol, this
should not pose a problem because no DCCP traffic is expected to be seen
on the wire.
As for the code for matching on dccp header for iptables and nftables,
mark it as deprecated and keep it in place. Ruleset restoration is an
atomic operation. Without dccp matching support, an astray match on dccp
could break this operation leaving your computer with no policy in
place, so let's follow a more conservative approach for matches.
Add CONFIG_NFT_EXTHDR_DCCP which is set to 'n' by default to deprecate
dccp extension support. Similarly, label CONFIG_NETFILTER_XT_MATCH_DCCP
as deprecated too and also set it to 'n' by default.
Code to match on DCCP protocol from ebtables also remains in place, this
is just a few checks on IPPROTO_DCCP from _check() path which is
exercised when ruleset is loaded. There is another use of IPPROTO_DCCP
from the _check() path in the iptables multiport match. Another check
for IPPROTO_DCCP from the packet in the reject target is also removed.
So let's schedule removal of the dccp matching for a second stage, this
should not interfer with the dccp retirement since this is only matching
on the dccp header.
Cc: "David S. Miller" <davem@davemloft.net>
Cc: Eric Dumazet <edumazet@google.com>
Cc: Jakub Kicinski <kuba@kernel.org>
Cc: Paolo Abeni <pabeni@redhat.com>
Cc: Kuniyuki Iwashima <kuniyu@amazon.com>
Reviewed-by: Simon Horman <horms@kernel.org>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
158 lines
3.7 KiB
Plaintext
158 lines
3.7 KiB
Plaintext
# CONFIG_LOCALVERSION_AUTO is not set
|
|
CONFIG_SYSVIPC=y
|
|
CONFIG_NO_HZ=y
|
|
CONFIG_HIGH_RES_TIMERS=y
|
|
CONFIG_BSD_PROCESS_ACCT=y
|
|
CONFIG_IKCONFIG=y
|
|
CONFIG_IKCONFIG_PROC=y
|
|
CONFIG_LOG_BUF_SHIFT=14
|
|
CONFIG_BLK_DEV_INITRD=y
|
|
CONFIG_EXPERT=y
|
|
# CONFIG_ELF_CORE is not set
|
|
# CONFIG_KALLSYMS is not set
|
|
# CONFIG_VM_EVENT_COUNTERS is not set
|
|
CONFIG_MIKROTIK_RB532=y
|
|
CONFIG_HZ_100=y
|
|
# CONFIG_SECCOMP is not set
|
|
CONFIG_PCI=y
|
|
# CONFIG_PCI_QUIRKS is not set
|
|
CONFIG_MODULES=y
|
|
CONFIG_MODULE_UNLOAD=y
|
|
# CONFIG_BLK_DEV_BSG is not set
|
|
CONFIG_PARTITION_ADVANCED=y
|
|
CONFIG_MAC_PARTITION=y
|
|
CONFIG_BSD_DISKLABEL=y
|
|
CONFIG_NET=y
|
|
CONFIG_PACKET=y
|
|
CONFIG_UNIX=y
|
|
CONFIG_INET=y
|
|
CONFIG_IP_MULTICAST=y
|
|
CONFIG_IP_ADVANCED_ROUTER=y
|
|
CONFIG_IP_MULTIPLE_TABLES=y
|
|
CONFIG_IP_ROUTE_MULTIPATH=y
|
|
CONFIG_IP_ROUTE_VERBOSE=y
|
|
CONFIG_SYN_COOKIES=y
|
|
CONFIG_INET_DIAG=m
|
|
CONFIG_TCP_CONG_ADVANCED=y
|
|
CONFIG_TCP_CONG_CUBIC=m
|
|
CONFIG_TCP_CONG_HSTCP=m
|
|
CONFIG_TCP_CONG_HYBLA=m
|
|
CONFIG_TCP_CONG_VEGAS=y
|
|
CONFIG_TCP_CONG_SCALABLE=m
|
|
CONFIG_TCP_CONG_LP=m
|
|
CONFIG_TCP_CONG_VENO=m
|
|
CONFIG_TCP_CONG_YEAH=m
|
|
CONFIG_TCP_CONG_ILLINOIS=m
|
|
# CONFIG_IPV6 is not set
|
|
CONFIG_NETFILTER=y
|
|
# CONFIG_BRIDGE_NETFILTER is not set
|
|
CONFIG_NF_CONNTRACK=y
|
|
CONFIG_NF_CONNTRACK_MARK=y
|
|
CONFIG_NF_CONNTRACK_FTP=m
|
|
CONFIG_NF_CONNTRACK_IRC=m
|
|
CONFIG_NF_CONNTRACK_TFTP=m
|
|
CONFIG_NETFILTER_XT_TARGET_NFLOG=m
|
|
CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m
|
|
CONFIG_NETFILTER_XT_TARGET_TRACE=m
|
|
CONFIG_NETFILTER_XT_MATCH_COMMENT=m
|
|
CONFIG_NETFILTER_XT_MATCH_CONNLIMIT=m
|
|
CONFIG_NETFILTER_XT_MATCH_HASHLIMIT=m
|
|
CONFIG_NETFILTER_XT_MATCH_LIMIT=y
|
|
CONFIG_NETFILTER_XT_MATCH_MULTIPORT=y
|
|
CONFIG_NETFILTER_XT_MATCH_REALM=m
|
|
CONFIG_NETFILTER_XT_MATCH_SCTP=m
|
|
CONFIG_NETFILTER_XT_MATCH_STATE=y
|
|
CONFIG_NETFILTER_XT_MATCH_U32=m
|
|
CONFIG_IP_NF_IPTABLES=y
|
|
CONFIG_IP_NF_FILTER=y
|
|
CONFIG_IP_NF_TARGET_REJECT=y
|
|
CONFIG_IP_NF_MANGLE=y
|
|
CONFIG_IP_NF_RAW=m
|
|
CONFIG_BRIDGE=y
|
|
CONFIG_VLAN_8021Q=y
|
|
CONFIG_LLC2=m
|
|
CONFIG_NET_SCHED=y
|
|
CONFIG_NET_SCH_CBQ=m
|
|
CONFIG_NET_SCH_PRIO=m
|
|
CONFIG_NET_SCH_NETEM=m
|
|
CONFIG_NET_CLS_BASIC=m
|
|
CONFIG_NET_CLS_ROUTE4=m
|
|
CONFIG_NET_CLS_FW=m
|
|
CONFIG_NET_CLS_U32=m
|
|
CONFIG_CLS_U32_PERF=y
|
|
CONFIG_CLS_U32_MARK=y
|
|
CONFIG_NET_CLS_RSVP=m
|
|
CONFIG_NET_CLS_RSVP6=m
|
|
CONFIG_NET_EMATCH=y
|
|
CONFIG_NET_EMATCH_CMP=m
|
|
CONFIG_NET_EMATCH_NBYTE=m
|
|
CONFIG_NET_EMATCH_U32=m
|
|
CONFIG_NET_EMATCH_META=m
|
|
CONFIG_NET_EMATCH_TEXT=m
|
|
CONFIG_NET_CLS_ACT=y
|
|
CONFIG_NET_ACT_POLICE=y
|
|
CONFIG_NET_ACT_GACT=m
|
|
CONFIG_GACT_PROB=y
|
|
CONFIG_NET_ACT_MIRRED=m
|
|
CONFIG_NET_ACT_PEDIT=m
|
|
CONFIG_HAMRADIO=y
|
|
CONFIG_MTD=y
|
|
CONFIG_MTD_BLOCK=y
|
|
CONFIG_MTD_BLOCK2MTD=y
|
|
CONFIG_MTD_RAW_NAND=y
|
|
CONFIG_MTD_NAND_PLATFORM=y
|
|
CONFIG_ATA=y
|
|
# CONFIG_ATA_VERBOSE_ERROR is not set
|
|
# CONFIG_SATA_PMP is not set
|
|
CONFIG_PATA_RB532=y
|
|
CONFIG_NETDEVICES=y
|
|
CONFIG_IFB=m
|
|
CONFIG_KORINA=y
|
|
CONFIG_VIA_RHINE=y
|
|
CONFIG_PPP=m
|
|
CONFIG_PPP_BSDCOMP=m
|
|
CONFIG_PPP_DEFLATE=m
|
|
CONFIG_PPP_FILTER=y
|
|
CONFIG_PPP_MULTILINK=y
|
|
CONFIG_PPPOE=m
|
|
CONFIG_PPP_ASYNC=m
|
|
# CONFIG_KEYBOARD_ATKBD is not set
|
|
# CONFIG_INPUT_MOUSE is not set
|
|
CONFIG_INPUT_MISC=y
|
|
CONFIG_INPUT_RB532_BUTTON=y
|
|
# CONFIG_SERIO is not set
|
|
# CONFIG_VT is not set
|
|
# CONFIG_LEGACY_PTYS is not set
|
|
CONFIG_SERIAL_8250=y
|
|
CONFIG_SERIAL_8250_CONSOLE=y
|
|
# CONFIG_SERIAL_8250_PCI is not set
|
|
CONFIG_SERIAL_8250_NR_UARTS=2
|
|
CONFIG_SERIAL_8250_RUNTIME_UARTS=2
|
|
CONFIG_HW_RANDOM=y
|
|
CONFIG_GPIO_SYSFS=y
|
|
# CONFIG_HWMON is not set
|
|
CONFIG_WATCHDOG=y
|
|
CONFIG_WATCHDOG_NOWAYOUT=y
|
|
CONFIG_RC32434_WDT=y
|
|
# CONFIG_VGA_ARB is not set
|
|
# CONFIG_HID is not set
|
|
CONFIG_NEW_LEDS=y
|
|
CONFIG_LEDS_CLASS=y
|
|
CONFIG_LEDS_MIKROTIK_RB532=y
|
|
CONFIG_LEDS_TRIGGERS=y
|
|
CONFIG_LEDS_TRIGGER_TIMER=y
|
|
CONFIG_LEDS_TRIGGER_HEARTBEAT=y
|
|
CONFIG_LEDS_TRIGGER_DEFAULT_ON=y
|
|
CONFIG_EXT2_FS=y
|
|
# CONFIG_DNOTIFY is not set
|
|
CONFIG_PROC_KCORE=y
|
|
CONFIG_TMPFS=y
|
|
CONFIG_CONFIGFS_FS=y
|
|
CONFIG_JFFS2_FS=y
|
|
CONFIG_JFFS2_SUMMARY=y
|
|
CONFIG_JFFS2_COMPRESSION_OPTIONS=y
|
|
CONFIG_SQUASHFS=y
|
|
CONFIG_CRYPTO_BENCHMARK=m
|
|
# CONFIG_CRYPTO_HW is not set
|
|
CONFIG_STRIP_ASM_SYMS=y
|