diff options
author | Joel Stanley <joel@jms.id.au> | 2018-09-12 02:49:29 +0300 |
---|---|---|
committer | Brad Bishop <bradleyb@fuzziesquirrel.com> | 2018-09-12 16:52:58 +0300 |
commit | e918757fd9f23aeb15905b0cd188c52ab1017793 (patch) | |
tree | 130d352a7d8ff68a1c4f46c67f4fee5c0d7310e9 /meta-aspeed/recipes-kernel/linux/ast2400/defconfig | |
parent | 3f236b77a7fd52176b731d279172a45c5ad9e8bd (diff) | |
download | openbmc-e918757fd9f23aeb15905b0cd188c52ab1017793.tar.xz |
linux-aspeed: Disable CONFIG_BPF_STREAM_PARSER
This is a feature used to attach BPF programs to network stockets. It is
used by systemd to restrict the IP addresses that processes can access
at a per-cgroup level. The upstream commit message calls this 'per-unit
IP access lists and accounting'.
It requires CONFIG_CGROUP_BPF and CONFIG_BPF_STREAM_PARSER. We did not
have CONFIG_CGROUP_BPF turned on, which caused the noisy messages.
Until OpenBMC adds configuration to take advantage of this feature,
disable CONFIG_BPF_STREAM_PARSER which allows systemd to correctly
detect that it cannot use BPF filters.
(From meta-aspeed rev: 53e41a55f5b3890fcec07c900a1894d57d6d499c)
Change-Id: I16a3c07025b7e954afa2dfdc7982fa70119c60dd
Signed-off-by: Joel Stanley <joel@jms.id.au>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
Diffstat (limited to 'meta-aspeed/recipes-kernel/linux/ast2400/defconfig')
-rw-r--r-- | meta-aspeed/recipes-kernel/linux/ast2400/defconfig | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/meta-aspeed/recipes-kernel/linux/ast2400/defconfig b/meta-aspeed/recipes-kernel/linux/ast2400/defconfig index bc85ca85f..faacdc670 100644 --- a/meta-aspeed/recipes-kernel/linux/ast2400/defconfig +++ b/meta-aspeed/recipes-kernel/linux/ast2400/defconfig @@ -60,7 +60,6 @@ CONFIG_NETFILTER=y # CONFIG_NETFILTER_ADVANCED is not set CONFIG_VLAN_8021Q=y CONFIG_NET_NCSI=y -CONFIG_BPF_STREAM_PARSER=y # CONFIG_WIRELESS is not set CONFIG_UEVENT_HELPER_PATH="/sbin/hotplug" CONFIG_DEVTMPFS=y |