mk-rootfs.sh

hc

2023-12-11 072de836f53be56a70cecf70b43ae43b7ce17376

 kernel/net/bridge/netfilter/Kconfig
..
..
@@ -1,3 +1,4 @@
1
+# SPDX-License-Identifier: GPL-2.0-only
1
2
 #
2
3
 # Bridge netfilter configuration
3
4
 #
..
..
@@ -5,9 +6,15 @@
5
6
 menuconfig NF_TABLES_BRIDGE
6
7
 	depends on BRIDGE && NETFILTER && NF_TABLES
7
8
 	select NETFILTER_FAMILY_BRIDGE
8
-	bool "Ethernet Bridge nf_tables support"
9
+	tristate "Ethernet Bridge nf_tables support"
9
10
 
10
11
 if NF_TABLES_BRIDGE
12
+
13
+config NFT_BRIDGE_META
14
+	tristate "Netfilter nf_table bridge meta support"
15
+	help
16
+	  Add support for bridge dedicated meta key.
17
+
11
18
 config NFT_BRIDGE_REJECT
12
19
 	tristate "Netfilter nf_tables bridge reject support"
13
20
 	depends on NFT_REJECT && NFT_REJECT_IPV4 && NFT_REJECT_IPV6
..
..
@@ -19,6 +26,20 @@
19
26
 	select NF_LOG_COMMON
20
27
 
21
28
 endif # NF_TABLES_BRIDGE
29
+
30
+config NF_CONNTRACK_BRIDGE
31
+	tristate "IPv4/IPV6 bridge connection tracking support"
32
+	depends on NF_CONNTRACK
33
+	default n
34
+	help
35
+	  Connection tracking keeps a record of what packets have passed
36
+	  through your machine, in order to figure out how they are related
37
+	  into connections. This is used to enhance packet filtering via
38
+	  stateful policies. Enable this if you want native tracking from
39
+	  the bridge. This provides a replacement for the `br_netfilter'
40
+	  infrastructure.
41
+
42
+	  To compile it as a module, choose M here.  If unsure, say N.
22
43
 
23
44
 menuconfig BRIDGE_NF_EBTABLES
24
45
 	tristate "Ethernet Bridge tables (ebtables) support"
..
..
@@ -113,7 +134,7 @@
113
134
 	  equivalent of the iptables limit match.
114
135
 
115
136
 	  If you want to compile it as a module, say M here and read
116
-	  <file:Documentation/kbuild/modules.txt>.  If unsure, say `N'.
137
+	  <file:Documentation/kbuild/modules.rst>.  If unsure, say `N'.
117
138
 
118
139
 config BRIDGE_EBT_MARK
119
140
 	tristate "ebt: mark filter support"