tjh.dev / kernel
Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel os linux
fork atom

netfilter: Remove NOTRACK/RAW dependency on NETFILTER_ADVANCED.

Distributions are using this in their default scripts, so don't hide
them behind the advanced setting.

Reported-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: David S. Miller <davem@davemloft.net>

David S. Miller 46a246c4 c16a98ed

-3
-1
net/ipv4/netfilter/Kconfig
··· 325 325 # raw + specific targets 326 326 config IP_NF_RAW 327 327 tristate 'raw table support (required for NOTRACK/TRACE)' 328 - depends on NETFILTER_ADVANCED 329 328 help 330 329 This option adds a `raw' table to iptables. This table is the very 331 330 first in the netfilter framework and hooks in at the PREROUTING
-1
net/ipv6/netfilter/Kconfig
··· 186 186 187 187 config IP6_NF_RAW 188 188 tristate 'raw table support (required for TRACE)' 189 - depends on NETFILTER_ADVANCED 190 189 help 191 190 This option adds a `raw' table to ip6tables. This table is the very 192 191 first in the netfilter framework and hooks in at the PREROUTING
-1
net/netfilter/Kconfig
··· 542 542 tristate '"NOTRACK" target support' 543 543 depends on IP_NF_RAW || IP6_NF_RAW 544 544 depends on NF_CONNTRACK 545 - depends on NETFILTER_ADVANCED 546 545 help 547 546 The NOTRACK target allows a select rule to specify 548 547 which packets *not* to enter the conntrack/NAT