Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 2dff806c authored by Roman Kiryanov's avatar Roman Kiryanov Committed by Alistair Delva
Browse files

UPSTREAM: net: disable BRIDGE_NETFILTER by default 



The description says 'If unsure, say N.' but
the module is built as M by default (once
the dependencies are satisfied).

When the module is selected (Y or M), it enables
NETFILTER_FAMILY_BRIDGE and SKB_EXTENSIONS
which alter kernel internal structures.

We (Android Studio Emulator) currently do not
use this module and think this it is more consistent
to have it disabled by default as opposite to
disabling it explicitly to prevent enabling
NETFILTER_FAMILY_BRIDGE and SKB_EXTENSIONS.

Signed-off-by: default avatarRoman Kiryanov <rkir@google.com>
Acked-by: default avatarFlorian Westphal <fw@strlen.de>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
(cherry picked from commit 98bda63e20daab95bdc084ce00459a4f622a0505)
Bug: 150463745
Change-Id: I664d752f504598d21747d046930e6d7257c31253
parent e7ce229b

net/Kconfig

+0 −1
Original line number Diff line number Diff line
@@ -187,7 +187,6 @@ config BRIDGE_NETFILTER 
	depends on NETFILTER_ADVANCED

	select NETFILTER_FAMILY_BRIDGE

	select SKB_EXTENSIONS

	default m

	---help---

	  Enabling this option will let arptables resp. iptables see bridged

	  ARP resp. IP traffic. If you want a bridging firewall, you probably