From: Davide Caratti <dcaratti@xxxxxxxxxx>
redhat/configs: enable nf_tables SYNPROXY extension on ark
as part of the ongoing iptables deprecation, enable SYNPROXY extension
on nftables. While at it, explicitly disable CONFIG_IP{,6}_NF_TARGET_SYNPROXY:
they were 'm' but 'make dist-configs' clears them since they depend on
CONFIG_NF_IP{,6}TABLES that's unset in ark. The overall result is:
support for SYNPROXY is still there, and the kernel keeps building with
CONFIG_NETFILTER_SYNPROXY (that's selected by the above items) set to 'm'.
Signed-off-by: Davide Caratti <dcaratti@xxxxxxxxxx>
diff --git a/redhat/configs/ark/generic/CONFIG_IP6_NF_TARGET_SYNPROXY b/redhat/configs/ark/generic/CONFIG_IP6_NF_TARGET_SYNPROXY
new file mode 100644
index blahblah..blahblah 100644
--- /dev/null
+++ b/redhat/configs/ark/generic/CONFIG_IP6_NF_TARGET_SYNPROXY
@@ -0,0 +1 @@
+# CONFIG_IP6_NF_TARGET_SYNPROXY is not set
diff --git a/redhat/configs/ark/generic/CONFIG_IP_NF_TARGET_SYNPROXY b/redhat/configs/ark/generic/CONFIG_IP_NF_TARGET_SYNPROXY
new file mode 100644
index blahblah..blahblah 100644
--- /dev/null
+++ b/redhat/configs/ark/generic/CONFIG_IP_NF_TARGET_SYNPROXY
@@ -0,0 +1 @@
+# CONFIG_IP_NF_TARGET_SYNPROXY is not set
diff --git a/redhat/configs/ark/generic/CONFIG_NFT_SYNPROXY b/redhat/configs/ark/generic/CONFIG_NFT_SYNPROXY
deleted file mode 100644
index blahblah..blahblah 0
--- a/redhat/configs/ark/generic/CONFIG_NFT_SYNPROXY
+++ /dev/null
@@ -1 +0,0 @@
-# CONFIG_NFT_SYNPROXY is not set
diff --git a/redhat/configs/fedora/generic/CONFIG_NFT_SYNPROXY b/redhat/configs/common/generic/CONFIG_NFT_SYNPROXY
rename from redhat/configs/fedora/generic/CONFIG_NFT_SYNPROXY
rename to redhat/configs/common/generic/CONFIG_NFT_SYNPROXY
index blahblah..blahblah 100644
--- a/redhat/configs/fedora/generic/CONFIG_NFT_SYNPROXY
+++ b/redhat/configs/common/generic/CONFIG_NFT_SYNPROXY
--
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1720
_______________________________________________
kernel mailing list -- kernel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to kernel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/kernel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
