[go: nahoru, domu]

CHROMIUM: Enable qtaguid prerequisites

For ARC we need to enable CONFIG_NETFILTER_XT_MATCH_QTAGUID=y,
which depends on:

  # CONFIG_NETFILTER_XT_MATCH_OWNER is not set
  CONFIG_NETFILTER_XT_MATCH_SOCKET=y
  CONFIG_NF_DEFRAG_IPV6=y
  CONFIG_NF_CONNTRACK_IPV6=y

CONFIG_NETFILTER_XT_MATCH_SOCKET=y also depends on:
  CONFIG_IP6_NF_IPTABLES=y

The former two items are configured in cros-kernel2.eclass.  The latter
three items are configured here.

BUG=b:29455973
TEST=`iptables -I OUTPUT -m owner --uid-owner 216 -j DROP` while pinging
     from crosh

Change-Id: I696621d0a99eb9ac2d8bebd111a975f9490e6f2a
Signed-off-by: Kevin Cernekee <cernekee@chromium.org>
Reviewed-on: https://chromium-review.googlesource.com/373623
Reviewed-by: Nicolas Boichat <drinkcat@chromium.org>
(cherry picked from commit 22acf943256e342ca00eb3a92fc4761997dc3f64)
Reviewed-on: https://chromium-review.googlesource.com/375393
1 file changed