Toralf Förster wrote: > net/built-in.o: In function `xt_connsecmark_init': > xt_CONNSECMARK.c:(.init.text+0xed4): undefined reference to `need_conntrack' > make: *** [.tmp_vmlinux1] Error 1 Thanks, fixed by this patch. BTW, please report non-critical bugs to netfilter-devel only. I know MAINTAINERS says to send them to coreteam@, I'm going to fix that.
[NETFILTER]: xt_CONNSECMARK: fix Kconfig dependencies CONNSECMARK needs conntrack, add missing dependency to fix linking error with CONNSECMARK=y and CONNTRACK=m. Reported by Toralf Förster <toralf.foerster@xxxxxx>. Signed-off-by: Patrick McHardy <kaber@xxxxxxxxx> --- commit 0ab5046ab83e4f0e88c40922701b2bc365f6aa09 tree 4add4ff88904c63e7ff20872f2faff015bbcbc28 parent 889d786a9211434b29e402a501d01a590b072d31 author Patrick McHardy <kaber@xxxxxxxxx> Wed, 11 Oct 2006 10:39:47 +0200 committer Patrick McHardy <kaber@xxxxxxxxx> Wed, 11 Oct 2006 10:39:47 +0200 net/netfilter/Kconfig | 4 +++- 1 files changed, 3 insertions(+), 1 deletions(-) diff --git a/net/netfilter/Kconfig b/net/netfilter/Kconfig index ce94732..f619c65 100644 --- a/net/netfilter/Kconfig +++ b/net/netfilter/Kconfig @@ -209,7 +209,9 @@ config NETFILTER_XT_TARGET_SECMARK config NETFILTER_XT_TARGET_CONNSECMARK tristate '"CONNSECMARK" target support' - depends on NETFILTER_XTABLES && (NF_CONNTRACK_SECMARK || IP_NF_CONNTRACK_SECMARK) + depends on NETFILTER_XTABLES && \ + ((NF_CONNTRACK && NF_CONNTRACK_SECMARK) || \ + (IP_NF_CONNTRACK && IP_NF_CONNTRACK_SECMARK)) help The CONNSECMARK target copies security markings from packets to connections, and restores security markings from connections
