[RFC PATCH linux dev-5.4 1/4] ARM: configs: aspeed-g5: Disable netfilter

Andrew Jeffery andrew at aj.id.au
Thu May 14 23:27:00 AEST 2020


Enabling modules with CONFIG_NETFILTER=y and CONFIG_NETFILTER_ADVANCED=n
results in a diverse set of netfilter functions being built as modules.
These functions were not previously enabled in any way because modules
were disabled, therefore we can't have been using them. Given that we
aren't using them, disable netfilter as well to prevent them from being
built.

CONFIG_NETFILTER=y was introduced in 20c90af9ea6a ("ARM: config: aspeed:
Update defconfig") with little fanfare in the commit message, which
makes me wonder whether it was enabled because we needed it or whether
its addition slipped through the cracks.

Signed-off-by: Andrew Jeffery <andrew at aj.id.au>
---
 arch/arm/configs/aspeed_g5_defconfig | 2 --
 1 file changed, 2 deletions(-)

diff --git a/arch/arm/configs/aspeed_g5_defconfig b/arch/arm/configs/aspeed_g5_defconfig
index cdf30fbe613e..e124b4ddd442 100644
--- a/arch/arm/configs/aspeed_g5_defconfig
+++ b/arch/arm/configs/aspeed_g5_defconfig
@@ -69,8 +69,6 @@ CONFIG_IPV6_ROUTER_PREF=y
 CONFIG_IPV6_ROUTE_INFO=y
 CONFIG_IPV6_OPTIMISTIC_DAD=y
 CONFIG_IPV6_MULTIPLE_TABLES=y
-CONFIG_NETFILTER=y
-# CONFIG_NETFILTER_ADVANCED is not set
 CONFIG_VLAN_8021Q=y
 CONFIG_NET_NCSI=y
 # CONFIG_WIRELESS is not set
-- 
2.25.1



More information about the openbmc mailing list