mirror of https://gitee.com/openkylin/linux.git
xt_socket: checks for the state of nf_conntrack
xt_socket can use connection tracking, and checks whether it is a module. Signed-off-by: Laszlo Attila Toth <panther@balabit.hu> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
parent
689c96cca7
commit
acda074390
|
@ -837,6 +837,7 @@ config NETFILTER_XT_MATCH_SOCKET
|
|||
depends on NETFILTER_TPROXY
|
||||
depends on NETFILTER_XTABLES
|
||||
depends on NETFILTER_ADVANCED
|
||||
depends on !NF_CONNTRACK || NF_CONNTRACK
|
||||
select NF_DEFRAG_IPV4
|
||||
help
|
||||
This option adds a `socket' match, which can be used to match
|
||||
|
|
Loading…
Reference in New Issue