diff mbox series

[cip-kernel-config] 6.1.y-cip/arm/qemu_arm_defconfig: Add audit and nftables configs

Message ID 20230710055809.10197-1-Sai.Sathujoda@toshiba-tsip.com (mailing list archive)
State New
Headers show
Series [cip-kernel-config] 6.1.y-cip/arm/qemu_arm_defconfig: Add audit and nftables configs | expand

Commit Message

Sai.Sathujoda@toshiba-tsip.com July 10, 2023, 5:58 a.m. UTC 
From: Sai <Sai.Sathujoda@toshiba-tsip.com>

These kernel configs are required for nftables and auditd package
to work which is used for IEC-62443-4-2 evaluation.

Signed-off-by: Sai <Sai.Sathujoda@toshiba-tsip.com>
---
 6.1.y-cip/arm/qemu_arm_defconfig | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

Comments

Nobuhiro Iwamatsu July 18, 2023, 1:49 a.m. UTC | #1 
> -----Original Message-----
> From: Sai.Sathujoda@toshiba-tsip.com <Sai.Sathujoda@toshiba-tsip.com>
> Sent: Monday, July 10, 2023 2:58 PM
> To: cip-dev@lists.cip-project.org; iwamatsu nobuhiro(岩松 信洋 ○ＤＩＴＣ□
> ＤＩＴ○ＯＳＴ) <nobuhiro1.iwamatsu@toshiba.co.jp>
> Cc: ashrith sai(ＴＳＩＰ) <Sai.Sathujoda@toshiba-tsip.com>; dinesh
> kumar(ＴＳＩＰ TMIEC ODG Porting) <dinesh.kumar@toshiba-tsip.com>;
> hayashi kazuhiro(林 和宏 ＤＭＥ ○ＤＩＧ□ＭＰＳ○ＭＰ４)
> <kazuhiro3.hayashi@toshiba.co.jp>
> Subject: [cip-kernel-config] 6.1.y-cip/arm/qemu_arm_defconfig: Add audit
> and nftables configs
> 
> From: Sai <Sai.Sathujoda@toshiba-tsip.com>
> 
> These kernel configs are required for nftables and auditd package to work
> which is used for IEC-62443-4-2 evaluation.
> 
> Signed-off-by: Sai <Sai.Sathujoda@toshiba-tsip.com>

Applied, thanks.

Best regards,
  Nobuhiro
diff mbox series

Patch

diff --git a/6.1.y-cip/arm/qemu_arm_defconfig b/6.1.y-cip/arm/qemu_arm_defconfig
index 946bcc9..ad11ce6 100644
--- a/6.1.y-cip/arm/qemu_arm_defconfig
+++ b/6.1.y-cip/arm/qemu_arm_defconfig
@@ -34,6 +34,25 @@  CONFIG_IP_PNP=y
 CONFIG_IP_PNP_DHCP=y
 CONFIG_IP_PNP_BOOTP=y
 CONFIG_IP_PNP_RARP=y
+CONFIG_AUDIT=y
+CONFIG_NETFILTER_NETLINK=m
+CONFIG_NF_LOG_COMMON=m
+CONFIG_NF_NAT=m
+CONFIG_NF_TABLES=m
+CONFIG_NF_TABLES_INET=y
+CONFIG_NF_TABLES_NETDEV=y
+CONFIG_NFT_CT=m
+CONFIG_NFT_COUNTER=m
+CONFIG_NFT_LOG=m
+CONFIG_NFT_LIMIT=m
+CONFIG_NFT_NAT=m
+CONFIG_NETFILTER=y
+CONFIG_IP_NF_IPTABLES=m
+CONFIG_IP6_NF_IPTABLES=m
+CONFIG_NETFILTER_XT_TARGET_CHECKSUM=m
+CONFIG_NETFILTER_XT_TARGET_LOG=m
+CONFIG_NETFILTER_XT_MATCH_ADDRTYPE=m
+CONFIG_NETFILTER_XT_MATCH_CONNTRACK=m
 CONFIG_NETWORK_PHY_TIMESTAMPING=y
 CONFIG_VLAN_8021Q=y
 CONFIG_VLAN_8021Q_GVRP=y