From: Fedora Kernel Team <kernel-team@xxxxxxxxxxxxxxxxx> [redhat] New configs in net/netfilter Hi, As part of the ongoing rebase effort, the following configuration options need to be reviewed. As a reminder, the ARK configuration flow involves moving unreviewed configuration options from the pending directory to the ark directory. In the diff below, options are removed from the pending directory and added to the ark hierarchy. The final options that need to be ACKed are the files that are being added to the ark hierarchy. If the value for a file that is added should be changed, please reply with a better option. CONFIG_NFT_REJECT_NETDEV: This option enables the REJECT support from the netdev table. The return packet generation will be delegated to the IPv4 or IPv6 ICMP or TCP RST implementation depending on the protocol of the packet. Symbol: NFT_REJECT_NETDEV [=n] Type : tristate Defined at net/netfilter/Kconfig:685 Prompt: Netfilter nf_tables netdev REJECT support Depends on: NET [=y] && INET [=y] && NETFILTER [=y] && NF_TABLES [=m] && NF_TABLES_NETDEV [=y] && NFT_REJECT_IPV4 [=m] && NFT_REJECT_IPV6 [=m] Location: -> Networking support (NET [=y]) -> Networking options -> Network packet filtering framework (Netfilter) (NETFILTER [=y]) -> Core Netfilter Configuration -> Netfilter nf_tables support (NF_TABLES [=m]) --- Cc: Florian Westphal <fwestpha@xxxxxxxxxx> Cc: Jiri Benc <jbenc@xxxxxxxxxx> Cc: Marcelo Leitner <mleitner@xxxxxxxxxx> Cc: Davide Caratti <dcaratti@xxxxxxxxxx> Cc: Eric Garver <egarver@xxxxxxxxxx> Cc: Flavio Leitner <fbl@xxxxxxxxxx> Cc: Guillaume Nault <gnault@xxxxxxxxxx> Cc: Hangbin Liu <haliu@xxxxxxxxxx> Cc: Ivan Vecera <ivecera@xxxxxxxxxx> Cc: Jarod Wilson <jarod@xxxxxxxxxx> Cc: Lorenzo Bianconi <lorenzo.bianconi@xxxxxxxxxx> Cc: Paolo Abeni <pabeni@xxxxxxxxxx> Cc: Phil Sutter <psutter@xxxxxxxxxx> Cc: Sabrina Dubroca <sdubroca@xxxxxxxxxx> Cc: Stefano Brivio <sbrivio@xxxxxxxxxx> Cc: Xin Long <lxin@xxxxxxxxxx> Signed-off-by: Fedora Kernel Team <kernel-team@xxxxxxxxxxxxxxxxx> diff a/redhat/configs/common/generic/CONFIG_NFT_REJECT_NETDEV b/redhat/configs/common/generic/CONFIG_NFT_REJECT_NETDEV --- /dev/null +++ b/redhat/configs/common/generic/CONFIG_NFT_REJECT_NETDEV @@ -0,0 +1 @@ +# CONFIG_NFT_REJECT_NETDEV is not set diff a/redhat/configs/pending-common/generic/CONFIG_NFT_REJECT_NETDEV b/redhat/configs/pending-common/generic/CONFIG_NFT_REJECT_NETDEV --- a/redhat/configs/pending-common/generic/CONFIG_NFT_REJECT_NETDEV +++ /dev/null @@ -1,22 +0,0 @@ -# CONFIG_NFT_REJECT_NETDEV: -# -# This option enables the REJECT support from the netdev table. -# The return packet generation will be delegated to the IPv4 -# or IPv6 ICMP or TCP RST implementation depending on the -# protocol of the packet. -# -# Symbol: NFT_REJECT_NETDEV [=n] -# Type : tristate -# Defined at net/netfilter/Kconfig:685 -# Prompt: Netfilter nf_tables netdev REJECT support -# Depends on: NET [=y] && INET [=y] && NETFILTER [=y] && NF_TABLES [=m] && NF_TABLES_NETDEV [=y] && NFT_REJECT_IPV4 [=m] && NFT_REJECT_IPV6 [=m] -# Location: -# -> Networking support (NET [=y]) -# -> Networking options -# -> Network packet filtering framework (Netfilter) (NETFILTER [=y]) -# -> Core Netfilter Configuration -# -> Netfilter nf_tables support (NF_TABLES [=m]) -# -# -# -# CONFIG_NFT_REJECT_NETDEV is not set -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/812 _______________________________________________ kernel mailing list -- kernel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to kernel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/kernel@xxxxxxxxxxxxxxxxxxxxxxx