Commit 98bda63e authored by Roman Kiryanov's avatar Roman Kiryanov Committed by David S. Miller

net: disable BRIDGE_NETFILTER by default

The description says 'If unsure, say N.' but
the module is built as M by default (once
the dependencies are satisfied).

When the module is selected (Y or M), it enables
NETFILTER_FAMILY_BRIDGE and SKB_EXTENSIONS
which alter kernel internal structures.

We (Android Studio Emulator) currently do not
use this module and think this it is more consistent
to have it disabled by default as opposite to
disabling it explicitly to prevent enabling
NETFILTER_FAMILY_BRIDGE and SKB_EXTENSIONS.
Signed-off-by: default avatarRoman Kiryanov <rkir@google.com>
Acked-by: default avatarFlorian Westphal <fw@strlen.de>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent ac2fcfa9
...@@ -189,7 +189,6 @@ config BRIDGE_NETFILTER ...@@ -189,7 +189,6 @@ config BRIDGE_NETFILTER
depends on NETFILTER_ADVANCED depends on NETFILTER_ADVANCED
select NETFILTER_FAMILY_BRIDGE select NETFILTER_FAMILY_BRIDGE
select SKB_EXTENSIONS select SKB_EXTENSIONS
default m
---help--- ---help---
Enabling this option will let arptables resp. iptables see bridged Enabling this option will let arptables resp. iptables see bridged
ARP resp. IP traffic. If you want a bridging firewall, you probably ARP resp. IP traffic. If you want a bridging firewall, you probably
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment