From patchwork Tue Jul 21 07:12:40 2020 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Kento Yoshida X-Patchwork-Id: 11675055 Return-Path: Received: from mail.kernel.org (pdx-korg-mail-1.web.codeaurora.org [172.30.200.123]) by pdx-korg-patchwork-2.web.codeaurora.org (Postfix) with ESMTP id 29357138C for ; Tue, 21 Jul 2020 07:12:46 +0000 (UTC) Received: from web01.groups.io (web01.groups.io [66.175.222.12]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id BE85C22482 for ; Tue, 21 Jul 2020 07:12:45 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (1024-bit key) header.d=lists.cip-project.org header.i=@lists.cip-project.org header.b="ZtsmHbyM" DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org BE85C22482 Authentication-Results: mail.kernel.org; dmarc=none (p=none dis=none) header.from=renesas.com Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=bounce+64572+4943+4520428+8129116@lists.cip-project.org X-Received: by 127.0.0.2 with SMTP id 4GdIYY4521763xFSsyu8zlD6; Tue, 21 Jul 2020 00:12:45 -0700 X-Received: from JPN01-TY1-obe.outbound.protection.outlook.com (JPN01-TY1-obe.outbound.protection.outlook.com [40.107.140.117]) by mx.groups.io with SMTP id smtpd.web11.13919.1595315563924199675 for ; Tue, 21 Jul 2020 00:12:44 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=FKXG9YjAttyjVy6yRf663Yi0xHLUxQJFQXGYN+CeuaneTzAFWLbbBNQJ6E6FNyuut6qDO8qtlcfkiXM6TTavoiPvcLeRTnAcTdVJ+7gCoJD/DCZ4Oj4NK0BBmdxiO78CFPh1E4J12xUoJ8DXgysZ9MV9tldhXjtps2y0fpuUwyaJYG1OUi9rb/+bktTJB2PK+ujrJO/9HOmW1zl4zIFTxjvWNCzYVFKUPFzcRtJvV0l5+1W2amCnOYnXZkm5ssuTQzq0pBmTEXdk35s0wZLz40q9Q2Hj3tUqLDOpk3DRxRgYLQh2WxmYdRaEdyFAyKi/O9Myw7cr6XExajXdFAfq7w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=TYAO+CnrrjuWdiNAJIEhuGqC/jt0qmzt0eUJcnc5jLA=; b=cns3720o1tHJ60PW9sXF1yHyPVX5w8RzKzCQS3GKcAawGy246O3UKGBt5uzB9aVdWDWSni2h2k11E9qJPKPOjmyFFPB9E7BFLyHtw5+Y565m9tIjW6fcXbh7S1UzxuOaHHhJ2S7NTugMF9fnZ49WtpJEbfgrQlg1InZken5iwA4q017a6oATahlrpG6MU9x0XtLHFLmQsZiIqxelUWYI8qhsf7fTK/ULvasM5iis/D+KiBkYasKNfctx1aFechby+AkrOdcjp+GGhu4axswmXdO653hzi5q9R0+76dCv765R2gvblUX6xXhOB5j9Tvq1uunPAti8Z0ttWXW6SJEe6g== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=renesas.com; dmarc=pass action=none header.from=renesas.com; dkim=pass header.d=renesas.com; arc=none X-Received: from OSYPR01MB5366.jpnprd01.prod.outlook.com (2603:1096:604:84::10) by OSAPR01MB2244.jpnprd01.prod.outlook.com (2603:1096:603:1b::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3195.23; Tue, 21 Jul 2020 07:12:41 +0000 X-Received: from OSYPR01MB5366.jpnprd01.prod.outlook.com ([fe80::8449:1c80:1d61:299f]) by OSYPR01MB5366.jpnprd01.prod.outlook.com ([fe80::8449:1c80:1d61:299f%6]) with mapi id 15.20.3195.026; Tue, 21 Jul 2020 07:12:40 +0000 From: "Kento Yoshida" To: "cip-dev@lists.cip-project.org" Subject: [cip-dev] Kindly review for kernel config changes Thread-Topic: Kindly review for kernel config changes Thread-Index: AdZfLRya8AsrLlY1RdmzI8gvGsZiWQ== Date: Tue, 21 Jul 2020 07:12:40 +0000 Message-ID: Accept-Language: ja-JP, en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [122.50.33.189] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 1aa3d8b1-c27b-4723-45a8-08d82d4574d2 x-ms-traffictypediagnostic: OSAPR01MB2244: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7219; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: s+vBegI9d5OdCG2WqCT7PhgQvHjSixtFNQ5qriVI/X0igKvOyxpC6iYIm5oWBoOvUC/Nc3FJcSq56NcHx7ZF8X/YL7v1O700dG535Emv7OdvUsbSWrAMpPEPpyzGkqWrZtnbvM9i4B53hRd7PV9EGkCCNlMksVmrz28p0y5wGnIbWNN8LZ64Fec6/9EM4j2tbv5Ibidm78iVeESMOqzjyWvQW6f840YqLQzTKz41mA7okGr9MPWeWmBBCvk0o3lkQ6Vsil4+TEoD1htyZcEp/mPa+NAT33HqsswoYdtcUsa3vZVB2cxwxPeqxWmi9pXA4Fa1Up9IqqPHjlpa5tcFqA== x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True MIME-Version: 1.0 X-OriginatorOrg: renesas.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: OSYPR01MB5366.jpnprd01.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 1aa3d8b1-c27b-4723-45a8-08d82d4574d2 X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Jul 2020 07:12:40.7223 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 53d82571-da19-47e4-9cb4-625a166a4a2a X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: Ml2U+sISpQgo7idwSoBkWFiA0WNVzA8W6EgXjZOPEr/eF9dW5cR6XYESyVfnfHdqxvJBTW27CNyjytz3wIhceLhQMQI4eV81Jvouf156QN8= X-MS-Exchange-Transport-CrossTenantHeadersStamped: OSAPR01MB2244 Precedence: Bulk List-Unsubscribe: Sender: cip-dev@lists.cip-project.org List-Id: Mailing-List: list cip-dev@lists.cip-project.org; contact cip-dev+owner@lists.cip-project.org Delivered-To: mailing list cip-dev@lists.cip-project.org Reply-To: cip-dev@lists.cip-project.org X-Gm-Message-State: MkspyBa1PImsgC07FjxNVJsYx4520428AA= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=lists.cip-project.org; q=dns/txt; s=20140610; t=1595315565; bh=V/OP6KSTwr6DOxEz0vM8U4o6SWu4gZfm1TM2r8aY+qw=; h=Content-Type:Date:From:Reply-To:Subject:To; b=ZtsmHbyMrJuqAomeflVUSfYUp2nR49YyW6eR4AH6LfwqfV6AIpBQqSp3njI/jwH5mew wSFRiisvzF5vsGKN0XFDNX6RGp91rATK06XPF1Qxj/bX3iQi2VcC/e4YzuqORm4YycL/2 ByB6ZCj/L47ZETMwdRiGhmrRpBxgl4WjVMg= Hi, The security working group need to use "nftables", and it requires to add the below kernel configs to work. Before merging to the master branch of "isar-cip-core", would you kindly review to add the below configs by this Friday, everyone? BR, Kent -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#4943): https://lists.cip-project.org/g/cip-dev/message/4943 Mute This Topic: https://lists.cip-project.org/mt/75699231/4520428 Group Owner: cip-dev+owner@lists.cip-project.org Unsubscribe: https://lists.cip-project.org/g/cip-dev/leave/8129116/1171672734/xyzzy [patchwork-cip-dev@patchwork.kernel.org] -=-=-=-=-=-=-=-=-=-=-=- --- a/recipes-kernel/linux/files/qemu-amd64_defconfig +++ b/recipes-kernel/linux/files/qemu-amd64_defconfig @@ -351,3 +351,34 @@ CONFIG_CRYPTO_DEV_CCP=y # CONFIG_XZ_DEC_ARM is not set # CONFIG_XZ_DEC_ARMTHUMB is not set # CONFIG_XZ_DEC_SPARC is not set +CONFIG_NF_TABLES=y +CONFIG_NF_TABLES_INET=y +CONFIG_NF_TABLES_NETDEV=y +CONFIG_NFT_EXTHDR=y +CONFIG_NFT_META=y +CONFIG_NFT_CT=y +CONFIG_NFT_RBTREE=y +CONFIG_NFT_HASH=y +CONFIG_NFT_COUNTER=y +CONFIG_NFT_LOG=y +CONFIG_NFT_LIMIT=y +CONFIG_NFT_MASQ=y +CONFIG_NFT_REDIR=y +CONFIG_NFT_NAT=y +CONFIG_NFT_QUEUE=y +CONFIG_NFT_REJECT=y +CONFIG_NFT_REJECT_INET=y +CONFIG_NFT_COMPAT=y +CONFIG_NFT_CHAIN_ROUTE_IPV4=y +CONFIG_NFT_REJECT_IPV4=y +CONFIG_NFT_CHAIN_NAT_IPV4=y +CONFIG_NFT_MASQ_IPV4=y +# CONFIG_NFT_REDIR_IPV4 is not set +CONFIG_NFT_CHAIN_ROUTE_IPV6=y +CONFIG_NFT_REJECT_IPV6=y +CONFIG_NFT_CHAIN_NAT_IPV6=y +CONFIG_NFT_MASQ_IPV6=y +# CONFIG_NFT_REDIR_IPV6 is not set +CONFIG_NFT_BRIDGE_META=y +CONFIG_NFT_BRIDGE_REJECT=y +CONFIG_NF_LOG_BRIDGE=y