On 2015-10-07 10:22 PM, jianchuan.w...@windriver.com wrote:
From: Jianchuan Wang <jianchuan.w...@windriver.com>
Add a nf_tables feature that turns on the kernel options required to
support nf_tables.
This looks fine. I'm out of the office until Tuesday, but will do
the merge then.
Bruce
Signed-off-by: Jianchuan Wang <jianchuan.w...@windriver.com>
---
features/nf_tables/nf_tables.cfg | 24 ++++++++++++++++++++++++
features/nf_tables/nf_tables.scc | 8 ++++++++
2 files changed, 32 insertions(+)
create mode 100644 features/nf_tables/nf_tables.cfg
create mode 100644 features/nf_tables/nf_tables.scc
diff --git a/features/nf_tables/nf_tables.cfg b/features/nf_tables/nf_tables.cfg
new file mode 100644
index 0000000..5e085ce
--- /dev/null
+++ b/features/nf_tables/nf_tables.cfg
@@ -0,0 +1,24 @@
+CONFIG_NF_TABLES=m
+CONFIG_NF_TABLES_INET=m
+CONFIG_NFT_EXTHDR=m
+CONFIG_NFT_META=m
+CONFIG_NFT_CT=m
+CONFIG_NFT_RBTREE=m
+CONFIG_NFT_HASH=m
+CONFIG_NFT_COUNTER=m
+CONFIG_NFT_LOG=m
+CONFIG_NFT_LIMIT=m
+CONFIG_NFT_NAT=m
+CONFIG_NFT_QUEUE=m
+CONFIG_NFT_REJECT=m
+CONFIG_NFT_REJECT_INET=m
+CONFIG_NFT_COMPAT=m
+CONFIG_NF_TABLES_IPV4=m
+CONFIG_NFT_CHAIN_ROUTE_IPV4=m
+CONFIG_NFT_CHAIN_NAT_IPV4=m
+CONFIG_NFT_REJECT_IPV4=m
+CONFIG_NF_TABLES_ARP=m
+CONFIG_NF_TABLES_IPV6=m
+CONFIG_NFT_CHAIN_ROUTE_IPV6=m
+CONFIG_NFT_REJECT_IPV6=m
+CONFIG_NF_TABLES_BRIDGE=m
diff --git a/features/nf_tables/nf_tables.scc b/features/nf_tables/nf_tables.scc
new file mode 100644
index 0000000..b261acb
--- /dev/null
+++ b/features/nf_tables/nf_tables.scc
@@ -0,0 +1,8 @@
+#
+# Not directly sourced via a kernel type but via an external bb
+#
+
+define KFEATURE_DESCRIPTION "netfilter nf_tables"
+define KFEATURE_COMPATIBILITY all
+
+kconf non-hardware nf_tables.cfg
--
_______________________________________________
linux-yocto mailing list
linux-yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/linux-yocto
