From: Taehee Yoo <[email protected]>
Date: Mon, 5 Nov 2018 22:31:41 +0900
> When iptables command is executed, ip_{set/get}sockopt() try to upload
> bpfilter.ko if bpfilter is enabled. if it couldn't find bpfilter.ko,
> command is failed.
> bpfilter.ko is generated if CONFIG_BPFILTER_UMH is enabled.
> ip_{set/get}sockopt() only checks CONFIG_BPFILTER.
> So that if CONFIG_BPFILTER is enabled and CONFIG_BPFILTER_UMH is disabled,
> iptables command is always failed.
>
> test config:
> CONFIG_BPFILTER=y
> # CONFIG_BPFILTER_UMH is not set
>
> test command:
> %iptables -L
> iptables: No chain/target/match by that name.
>
> Fixes: d2ba09c17a06 ("net: add skeleton of bpfilter kernel module")
> Signed-off-by: Taehee Yoo <[email protected]>
Applied, thanks Taehee-ssi.
