diff options
| author | Roman Kiryanov <rkir@google.com> | 2020-02-19 13:40:06 -0800 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2020-02-20 15:02:02 -0800 |
| commit | 98bda63e20daab95bdc084ce00459a4f622a0505 (patch) | |
| tree | a06c9375c9287c3f8e9ebef8f7e88ea60e8671b4 | |
| parent | ac2fcfa9fd26db67d7000677c05629c34cc94564 (diff) | |
| download | linux-98bda63e20daab95bdc084ce00459a4f622a0505.tar.bz2 | |
net: disable BRIDGE_NETFILTER by default
The description says 'If unsure, say N.' but
the module is built as M by default (once
the dependencies are satisfied).
When the module is selected (Y or M), it enables
NETFILTER_FAMILY_BRIDGE and SKB_EXTENSIONS
which alter kernel internal structures.
We (Android Studio Emulator) currently do not
use this module and think this it is more consistent
to have it disabled by default as opposite to
disabling it explicitly to prevent enabling
NETFILTER_FAMILY_BRIDGE and SKB_EXTENSIONS.
Signed-off-by: Roman Kiryanov <rkir@google.com>
Acked-by: Florian Westphal <fw@strlen.de>
Signed-off-by: David S. Miller <davem@davemloft.net>
| -rw-r--r-- | net/Kconfig | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/net/Kconfig b/net/Kconfig index b0937a700f01..2eeb0e55f7c9 100644 --- a/net/Kconfig +++ b/net/Kconfig @@ -189,7 +189,6 @@ config BRIDGE_NETFILTER depends on NETFILTER_ADVANCED select NETFILTER_FAMILY_BRIDGE select SKB_EXTENSIONS - default m ---help--- Enabling this option will let arptables resp. iptables see bridged ARP resp. IP traffic. If you want a bridging firewall, you probably |