Эх сурвалжийг харах

target: linux: config: Make nftables option usable

Enabling CONFIG_NF_TABLES alone in kernel is not very useful without
even support for IPv4 or IPv6 families. Have it enable a basic set of
commonly used families and expressions, at least until someone finds
time to offer a more granular choice.

Fixes: 6ff694a1ee85d ("add new package nftables")
Signed-off-by: Phil Sutter <phil@nwl.cc>
Phil Sutter 3 долоо хоног өмнө
parent
commit
ac536fef92

+ 75 - 0
target/linux/config/Config.in.netfilter

@@ -123,6 +123,81 @@ config ADK_LINUX_KERNEL_IP_NF_MATCH_UNCLEAN
 config ADK_LINUX_KERNEL_IP_NF_MATCH_STRING
 	tristate
 
+config ADK_LINUX_KERNEL_NF_TABLES_INET
+	bool
+
+config ADK_LINUX_KERNEL_NF_TABLES_NETDEV
+	bool
+
+config ADK_LINUX_KERNEL_NFT_NUMGEN
+	tristate
+
+config ADK_LINUX_KERNEL_NFT_CT
+	tristate
+
+config ADK_LINUX_KERNEL_NFT_EXTHDR_DCCP
+	tristate
+
+config ADK_LINUX_KERNEL_NFT_CONNLIMIT
+	tristate
+
+config ADK_LINUX_KERNEL_NFT_LOG
+	tristate
+
+config ADK_LINUX_KERNEL_NFT_LIMIT
+	tristate
+
+config ADK_LINUX_KERNEL_NFT_MASQ
+	tristate
+
+config ADK_LINUX_KERNEL_NFT_REDIR
+	tristate
+
+config ADK_LINUX_KERNEL_NFT_NAT
+	tristate
+
+config ADK_LINUX_KERNEL_NFT_TUNNEL
+	tristate
+
+config ADK_LINUX_KERNEL_NFT_QUOTA
+	tristate
+
+config ADK_LINUX_KERNEL_NFT_REJECT
+	tristate
+
+config ADK_LINUX_KERNEL_NFT_HASH
+	tristate
+
+config ADK_LINUX_KERNEL_NFT_SOCKET
+	tristate
+
+config ADK_LINUX_KERNEL_NFT_OSF
+	tristate
+
+config ADK_LINUX_KERNEL_NFT_TPROXY
+	tristate
+
+config ADK_LINUX_KERNEL_NFT_SYNPROXY
+	tristate
+
+config ADK_LINUX_KERNEL_NF_TABLES_IPV4
+	bool
+
+config ADK_LINUX_KERNEL_NFT_FIB_IPV4
+	tristate
+
+config ADK_LINUX_KERNEL_NF_TABLES_ARP
+	bool
+
+config ADK_LINUX_KERNEL_NF_TABLES_IPV6
+	bool
+
+config ADK_LINUX_KERNEL_NFT_FIB_IPV6
+	tristate
+
+config ADK_LINUX_KERNEL_NF_TABLES_BRIDGE
+	tristate
+
 menu "Core Netfilter Configuration"
 source target/linux/config/Config.in.netfilter.core
 endmenu

+ 13 - 0
target/linux/config/Config.in.netfilter.core

@@ -128,6 +128,19 @@ endmenu
 config ADK_LINUX_KERNEL_NF_TABLES
 	tristate "Netfilter nf_tables support"
 	select ADK_LINUX_KERNEL_NETFILTER_NETLINK
+	select ADK_LINUX_KERNEL_NF_TABLES_INET
+	select ADK_LINUX_KERNEL_NFT_CT
+	select ADK_LINUX_KERNEL_NFT_LOG
+	select ADK_LINUX_KERNEL_NFT_LIMIT
+	select ADK_LINUX_KERNEL_NFT_MASQ
+	select ADK_LINUX_KERNEL_NFT_REDIR
+	select ADK_LINUX_KERNEL_NFT_NAT
+	select ADK_LINUX_KERNEL_NFT_QUOTA
+	select ADK_LINUX_KERNEL_NFT_REJECT
+	select ADK_LINUX_KERNEL_NF_TABLES_IPV4
+	select ADK_LINUX_KERNEL_NFT_FIB_IPV4
+	select ADK_LINUX_KERNEL_NF_TABLES_IPV6
+	select ADK_LINUX_KERNEL_NFT_FIB_IPV6
 	help
 	  nftables is the new packet classification framework that intends to
 	  replace the existing {ip,ip6,arp,eb}_tables infrastructure. It