summaryrefslogtreecommitdiffstats
path: root/net/Kconfig
diff options
context:
space:
mode:
authorRoman Kiryanov <rkir@google.com>2020-02-19 22:40:06 +0100
committerDavid S. Miller <davem@davemloft.net>2020-02-21 00:02:02 +0100
commit98bda63e20daab95bdc084ce00459a4f622a0505 (patch)
treea06c9375c9287c3f8e9ebef8f7e88ea60e8671b4 /net/Kconfig
parentnet: macb: Properly handle phylink on at91rm9200 (diff)
downloadlinux-98bda63e20daab95bdc084ce00459a4f622a0505.tar.xz
linux-98bda63e20daab95bdc084ce00459a4f622a0505.zip
net: disable BRIDGE_NETFILTER by default
The description says 'If unsure, say N.' but the module is built as M by default (once the dependencies are satisfied). When the module is selected (Y or M), it enables NETFILTER_FAMILY_BRIDGE and SKB_EXTENSIONS which alter kernel internal structures. We (Android Studio Emulator) currently do not use this module and think this it is more consistent to have it disabled by default as opposite to disabling it explicitly to prevent enabling NETFILTER_FAMILY_BRIDGE and SKB_EXTENSIONS. Signed-off-by: Roman Kiryanov <rkir@google.com> Acked-by: Florian Westphal <fw@strlen.de> Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/Kconfig')
-rw-r--r--net/Kconfig1
1 files changed, 0 insertions, 1 deletions
diff --git a/net/Kconfig b/net/Kconfig
index b0937a700f01..2eeb0e55f7c9 100644
--- a/net/Kconfig
+++ b/net/Kconfig
@@ -189,7 +189,6 @@ config BRIDGE_NETFILTER
depends on NETFILTER_ADVANCED
select NETFILTER_FAMILY_BRIDGE
select SKB_EXTENSIONS
- default m
---help---
Enabling this option will let arptables resp. iptables see bridged
ARP resp. IP traffic. If you want a bridging firewall, you probably