mirror of https://gitee.com/openkylin/linux.git
xt_socket: checks for the state of nf_conntrack
xt_socket can use connection tracking, and checks whether it is a module. Signed-off-by: Laszlo Attila Toth <panther@balabit.hu> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
parent
689c96cca7
commit
acda074390
|
@ -837,6 +837,7 @@ config NETFILTER_XT_MATCH_SOCKET
|
||||||
depends on NETFILTER_TPROXY
|
depends on NETFILTER_TPROXY
|
||||||
depends on NETFILTER_XTABLES
|
depends on NETFILTER_XTABLES
|
||||||
depends on NETFILTER_ADVANCED
|
depends on NETFILTER_ADVANCED
|
||||||
|
depends on !NF_CONNTRACK || NF_CONNTRACK
|
||||||
select NF_DEFRAG_IPV4
|
select NF_DEFRAG_IPV4
|
||||||
help
|
help
|
||||||
This option adds a `socket' match, which can be used to match
|
This option adds a `socket' match, which can be used to match
|
||||||
|
|
Loading…
Reference in New Issue