On Tue, March 2, 2010 07:10, Imre Kaloz wrote:
> On 2010.03.02. 04:52:23 Nico <n...@openwrt.org> wrote:
>
>> Well, using DEVICE_TYPE does not solve the issue, it will just prevent
>> netfilter modules from being embedded in the final images, but wont
>> prevent them from being built and that will just fail for those targets
>> that have CONFIG_NETFILTER not set.
>>
>> There are 2 options now if we don't want a FIREWALL "feature" :
>>
>> 1) set CONFIG_NETFILTER=y in all targets, even for those that don't
>> need/use it ;
>>
>> 2) move CONFIG_NETFILTER=y out of kernel configs and add it to KCONFIG
>> in kmod-ipt-core, which will have almost the same effect as (1) but
>> Netfilter will only be enabled in target kernels if kmod-ipt-core is
>> selected.
>>
>> The current way of solving those issues right now have been a bunch of
>> DEPENDS:=@(!(TARGET_ps3||TARGET_pxcab)||BROKEN) where appropriate. We
>> need to find a Better Way To Do It (tm) here (the same apply to
>> CONFIG_WIRELESS btw).
>>
>> Feedback welcome (and mandatory) ;)
>
> What about one part "2" plus extending the device_type part (use it as a
> dependency)? "1" doesn't make sense, neither alone "2" really..
>
>
> Imre

What about "2" plus "# CONFIG_NETFILTER is not set" in general kernel
configs?
Is that possible and reasonable, or is that not a difference in all?
(Yes, I still have to learn a bunch about OpenWrt's build system)

Maddes


_______________________________________________
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/mailman/listinfo/openwrt-devel

Reply via email to