Commit d907c00e authored by Seblu's avatar Seblu
Browse files

Revert "Enable netfilter security tables" 

This reverts commit 136762b7.
parent 136762b7

PKGBUILD

+1 −1
Original line number Diff line number Diff line
@@ -17,7 +17,7 @@ _repourl='git+https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 
source=("$_repourl#tag=v${pkgver/_/-}"

        "config.$CARCH")

md5sums=('SKIP'

         '3a5df3d1735061a91c6d78efdcbc6584')

         '7fd61ae464c3a047666d76513e4c4da0')



prepare() {

  # fake linux directory if necessary

config.x86_64

+1 −16
Original line number Diff line number Diff line
@@ -1085,7 +1085,6 @@ CONFIG_IPV6_SUBTREES=y 
# CONFIG_IPV6_MROUTE is not set

CONFIG_IPV6_SEG6_LWTUNNEL=y

CONFIG_IPV6_SEG6_HMAC=y

CONFIG_NETLABEL=y

CONFIG_NETWORK_SECMARK=y

CONFIG_NET_PTP_CLASSIFY=y

CONFIG_NETWORK_PHY_TIMESTAMPING=y
@@ -1377,7 +1376,6 @@ CONFIG_IP_NF_TARGET_CLUSTERIP=m 
CONFIG_IP_NF_TARGET_ECN=m

CONFIG_IP_NF_TARGET_TTL=m

CONFIG_IP_NF_RAW=m

CONFIG_IP_NF_SECURITY=m

CONFIG_IP_NF_ARPTABLES=m

CONFIG_IP_NF_ARPFILTER=m

CONFIG_IP_NF_ARP_MANGLE=m
@@ -1418,7 +1416,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m 
CONFIG_IP6_NF_TARGET_SYNPROXY=m

CONFIG_IP6_NF_MANGLE=m

CONFIG_IP6_NF_RAW=m

CONFIG_IP6_NF_SECURITY=m

CONFIG_IP6_NF_NAT=m

CONFIG_IP6_NF_TARGET_MASQUERADE=m

CONFIG_IP6_NF_TARGET_NPT=m
@@ -6444,7 +6441,6 @@ CONFIG_FSNOTIFY=y 
CONFIG_DNOTIFY=y

CONFIG_INOTIFY_USER=y

CONFIG_FANOTIFY=y

# CONFIG_FANOTIFY_ACCESS_PERMISSIONS is not set

CONFIG_QUOTA=y

CONFIG_QUOTA_NETLINK_INTERFACE=y

# CONFIG_PRINT_QUOTA_WARNING is not set
@@ -6591,7 +6587,6 @@ CONFIG_PNFS_BLOCK=m 
CONFIG_PNFS_FLEXFILE_LAYOUT=m

CONFIG_NFS_V4_1_IMPLEMENTATION_ID_DOMAIN="kernel.org"

CONFIG_NFS_V4_1_MIGRATION=y

CONFIG_NFS_V4_SECURITY_LABEL=y

CONFIG_NFS_FSCACHE=y

# CONFIG_NFS_USE_LEGACY_DNS is not set

CONFIG_NFS_USE_KERNEL_DNS=y
@@ -6604,7 +6599,6 @@ CONFIG_NFSD_PNFS=y 
CONFIG_NFSD_BLOCKLAYOUT=y

CONFIG_NFSD_SCSILAYOUT=y

CONFIG_NFSD_FLEXFILELAYOUT=y

# CONFIG_NFSD_V4_SECURITY_LABEL is not set

CONFIG_GRACE_PERIOD=m

CONFIG_LOCKD=m

CONFIG_LOCKD_V4=y
@@ -6698,24 +6692,15 @@ CONFIG_TRUSTED_KEYS=m 
CONFIG_ENCRYPTED_KEYS=m

# CONFIG_KEY_DH_OPERATIONS is not set

# CONFIG_SECURITY_DMESG_RESTRICT is not set

CONFIG_SECURITY=y

# CONFIG_SECURITY is not set

CONFIG_SECURITYFS=y

CONFIG_SECURITY_NETWORK=y

CONFIG_PAGE_TABLE_ISOLATION=y

CONFIG_SECURITY_NETWORK_XFRM=y

CONFIG_SECURITY_PATH=y

# CONFIG_INTEL_TXT is not set

CONFIG_HAVE_HARDENED_USERCOPY_ALLOCATOR=y

CONFIG_HARDENED_USERCOPY=y

# CONFIG_HARDENED_USERCOPY_FALLBACK is not set

CONFIG_FORTIFY_SOURCE=y

# CONFIG_STATIC_USERMODEHELPER is not set

# CONFIG_SECURITY_SMACK is not set

# CONFIG_SECURITY_TOMOYO is not set

# CONFIG_SECURITY_APPARMOR is not set

# CONFIG_SECURITY_LOADPIN is not set

# CONFIG_SECURITY_YAMA is not set

# CONFIG_INTEGRITY is not set

CONFIG_DEFAULT_SECURITY_DAC=y

CONFIG_DEFAULT_SECURITY=""

CONFIG_XOR_BLOCKS=m