From patchwork Tue Aug 4 12:59:35 2020 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Venkata Pyla X-Patchwork-Id: 11700385 X-Patchwork-Delegate: iwamatsu@nigauri.org Return-Path: Received: from mail.kernel.org (pdx-korg-mail-1.web.codeaurora.org [172.30.200.123]) by pdx-korg-patchwork-2.web.codeaurora.org (Postfix) with ESMTP id 0FD6A722 for ; Tue, 4 Aug 2020 12:58:59 +0000 (UTC) Received: from web01.groups.io (web01.groups.io [66.175.222.12]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id A4EB12075A for ; Tue, 4 Aug 2020 12:58:58 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (1024-bit key) header.d=lists.cip-project.org header.i=@lists.cip-project.org header.b="Ui6cSsdj" DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org A4EB12075A Authentication-Results: mail.kernel.org; dmarc=none (p=none dis=none) header.from=toshiba-tsip.com Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=bounce+64572+5091+4520428+8129116@lists.cip-project.org X-Received: by 127.0.0.2 with SMTP id cmUSYY4521763xUxsGcSui3S; Tue, 04 Aug 2020 05:58:57 -0700 X-Received: from peak.toshiba-tesi.com (peak.toshiba-tesi.com [202.56.254.199]) by mx.groups.io with SMTP id smtpd.web10.4645.1596545936695050163 for ; Tue, 04 Aug 2020 05:58:57 -0700 IronPort-SDR: 1dTpIagyBykIHf0DRvqnOvXW/+xVmMFxfz4z6vg1shKV/tlKOEW/5Shb+2QPod1O3ZqJIolUbe j9ApJ3ew3JNw== X-IronPort-AV: E=Sophos;i="5.75,434,1589221800"; d="scan'208";a="5349121" X-Received: from unknown (HELO TOSBLRMBX0419.TOSHIBA-TSIP.COM) ([10.116.85.28]) by peak.toshiba-tesi.com with ESMTP; 04 Aug 2020 19:04:13 +0530 X-Received: from TOSBLRMBX0219.TOSHIBA-TSIP.COM (172.28.80.119) by TOSBLRMBX0419.TOSHIBA-TSIP.COM (10.116.85.28) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1847.3; Tue, 4 Aug 2020 18:28:36 +0530 X-Received: from pvenkat.TOSHIBA-TSIP.COM (172.28.80.121) by TOSBLRMBX0219.TOSHIBA-TSIP.COM (172.28.80.119) with Microsoft SMTP Server id 15.1.1847.3 via Frontend Transport; Tue, 4 Aug 2020 18:28:36 +0530 From: "Venkata Pyla" To: , , CC: venkata pyla Subject: [cip-dev] [cip-kernel-config] 4.19.y-cip/x86: qemu: Add nftable configs Date: Tue, 4 Aug 2020 18:29:35 +0530 Message-ID: <20200804125936.1434-1-venkata.pyla@toshiba-tsip.com> MIME-Version: 1.0 Precedence: Bulk List-Unsubscribe: Sender: cip-dev@lists.cip-project.org List-Id: Mailing-List: list cip-dev@lists.cip-project.org; contact cip-dev+owner@lists.cip-project.org Delivered-To: mailing list cip-dev@lists.cip-project.org Reply-To: cip-dev@lists.cip-project.org X-Gm-Message-State: 58lEaltEjXFCSdudQGt8EV11x4520428AA= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=lists.cip-project.org; q=dns/txt; s=20140610; t=1596545937; bh=FY6GQ+QvsFOcpLDPjyxoKktyJ5PqZrKADiQ0cgckBsk=; h=CC:Content-Type:Date:From:Reply-To:Subject:To; b=Ui6cSsdjaVLG0nhgnuFcgLlvgcO2avU+Uv3QWs1FhQwMS4JvTfY9VMWX6GxNuH2lOG4 hTxSU3kmIdjK6GXK5a3y39oAa/2E6T6TVUydPmLfI9s1kkYl755WV3KpmsDaBkWXe4EBd SXafv7QVFpyd9GMAPtN0Fl3PF7xVGq6d38E= From: venkata pyla These kenrel configs are required for nftable package to work and which is used for IEC-62443-4-2 evaluation Signed-off-by: venkata pyla --- 4.19.y-cip/x86/cip_qemu_defconfig | 31 +++++++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) diff --git a/4.19.y-cip/x86/cip_qemu_defconfig b/4.19.y-cip/x86/cip_qemu_defconfig index 02732ae..7e5437a 100644 --- a/4.19.y-cip/x86/cip_qemu_defconfig +++ b/4.19.y-cip/x86/cip_qemu_defconfig @@ -282,3 +282,34 @@ CONFIG_PROVIDE_OHCI1394_DMA_INIT=y CONFIG_EARLY_PRINTK_DBGP=y CONFIG_DEBUG_BOOT_PARAMS=y CONFIG_OPTIMIZE_INLINING=y +CONFIG_NF_TABLES=y +CONFIG_NF_TABLES_INET=y +CONFIG_NF_TABLES_NETDEV=y +CONFIG_NFT_EXTHDR=y +CONFIG_NFT_META=y +CONFIG_NFT_CT=y +CONFIG_NFT_RBTREE=y +CONFIG_NFT_HASH=y +CONFIG_NFT_COUNTER=y +CONFIG_NFT_LOG=y +CONFIG_NFT_LIMIT=y +CONFIG_NFT_MASQ=y +CONFIG_NFT_REDIR=y +CONFIG_NFT_NAT=y +CONFIG_NFT_QUEUE=y +CONFIG_NFT_REJECT=y +CONFIG_NFT_REJECT_INET=y +CONFIG_NFT_COMPAT=y +CONFIG_NFT_CHAIN_ROUTE_IPV4=y +CONFIG_NFT_REJECT_IPV4=y +CONFIG_NFT_CHAIN_NAT_IPV4=y +CONFIG_NFT_MASQ_IPV4=y +# CONFIG_NFT_REDIR_IPV4 is not set +CONFIG_NFT_CHAIN_ROUTE_IPV6=y +CONFIG_NFT_REJECT_IPV6=y +CONFIG_NFT_CHAIN_NAT_IPV6=y +CONFIG_NFT_MASQ_IPV6=y +# CONFIG_NFT_REDIR_IPV6 is not set +CONFIG_NFT_BRIDGE_META=y +CONFIG_NFT_BRIDGE_REJECT=y +CONFIG_NF_LOG_BRIDGE=y