lkml.org 
[lkml]   [2008]   [Jul]   [20]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [GIT]: Networking
    David Miller wrote:
    > From: Linus Torvalds <torvalds@linux-foundation.org>
    > Date: Sun, 20 Jul 2008 17:54:04 -0700 (PDT)
    >
    >
    >> Grr. And I quote:
    >>
    >> Security table (IP_NF_SECURITY) [Y/n/?] (NEW) ?
    >>
    >> This option adds a `security' table to iptables, for use
    >> with Mandatory Access Control (MAC) policy.
    >>
    >> If unsure, say N.
    >>
    >> why the heck does this new config option apparently default to 'Y'? It's a
    >> new option, so no old users can need it, and the docs even say you should
    >> say 'N' unless you know what you're doing.
    >>
    >> (Same issue with the IPv6 version).
    >>
    >> Don't do this.
    >>
    >
    > James/Patrick please fix this.
    >

    This is only the NETFILTER_ADVANCED=n default (for SECURITY=y).
    The netfilter defaults for NETFILTER_ADVANCED=n should be m/y for
    things that are needed by mainstream distributions for normal
    usage.

    I'm not sure how this is going to be used, James?



    \
     
     \ /
      Last update: 2008-07-21 03:23    [W:0.021 / U:31.884 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site