From 954335c062cce0a2f19565b180bf3de1fdf0397a Mon Sep 17 00:00:00 2001 From: Jens Maus Date: Thu, 19 Dec 2024 14:10:32 +0100 Subject: [PATCH] globally enable TCPMSS netfilter kernel option to address potential issues with wireguard support on different platforms. This refs https://github.com/home-assistant/operating-system/pull/3739 --- buildroot-external/board/odroid-n2/kernel_defconfig | 2 -- buildroot-external/board/tinkerboard/kernel_defconfig | 2 -- buildroot-external/kernel/6.6/global.config | 2 ++ 3 files changed, 2 insertions(+), 4 deletions(-) diff --git a/buildroot-external/board/odroid-n2/kernel_defconfig b/buildroot-external/board/odroid-n2/kernel_defconfig index 3f37623815..92b775b574 100644 --- a/buildroot-external/board/odroid-n2/kernel_defconfig +++ b/buildroot-external/board/odroid-n2/kernel_defconfig @@ -182,7 +182,6 @@ CONFIG_NETFILTER_XT_TARGET_NOTRACK=m CONFIG_NETFILTER_XT_TARGET_TEE=m CONFIG_NETFILTER_XT_TARGET_TPROXY=m CONFIG_NETFILTER_XT_TARGET_TRACE=m -CONFIG_NETFILTER_XT_TARGET_TCPMSS=m CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP=m CONFIG_NETFILTER_XT_MATCH_ADDRTYPE=m CONFIG_NETFILTER_XT_MATCH_BPF=m @@ -219,7 +218,6 @@ CONFIG_NETFILTER_XT_MATCH_RECENT=m CONFIG_NETFILTER_XT_MATCH_STATE=m CONFIG_NETFILTER_XT_MATCH_STATISTIC=m CONFIG_NETFILTER_XT_MATCH_STRING=m -CONFIG_NETFILTER_XT_MATCH_TCPMSS=m CONFIG_NETFILTER_XT_MATCH_TIME=m CONFIG_NETFILTER_XT_MATCH_U32=m CONFIG_IP_SET=m diff --git a/buildroot-external/board/tinkerboard/kernel_defconfig b/buildroot-external/board/tinkerboard/kernel_defconfig index f642e852d2..94f8fc14f1 100644 --- a/buildroot-external/board/tinkerboard/kernel_defconfig +++ b/buildroot-external/board/tinkerboard/kernel_defconfig @@ -210,7 +210,6 @@ CONFIG_NETFILTER_XT_TARGET_TEE=m CONFIG_NETFILTER_XT_TARGET_TPROXY=m CONFIG_NETFILTER_XT_TARGET_TRACE=m CONFIG_NETFILTER_XT_TARGET_SECMARK=m -CONFIG_NETFILTER_XT_TARGET_TCPMSS=m CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP=m CONFIG_NETFILTER_XT_MATCH_ADDRTYPE=m CONFIG_NETFILTER_XT_MATCH_BPF=m @@ -249,7 +248,6 @@ CONFIG_NETFILTER_XT_MATCH_SOCKET=m CONFIG_NETFILTER_XT_MATCH_STATE=m CONFIG_NETFILTER_XT_MATCH_STATISTIC=m CONFIG_NETFILTER_XT_MATCH_STRING=m -CONFIG_NETFILTER_XT_MATCH_TCPMSS=m CONFIG_NETFILTER_XT_MATCH_TIME=m CONFIG_NETFILTER_XT_MATCH_U32=m CONFIG_IP_SET=m diff --git a/buildroot-external/kernel/6.6/global.config b/buildroot-external/kernel/6.6/global.config index ff73687e18..1e19c62416 100644 --- a/buildroot-external/kernel/6.6/global.config +++ b/buildroot-external/kernel/6.6/global.config @@ -252,6 +252,8 @@ CONFIG_NETFILTER_XT_SET=m CONFIG_NETFILTER_XT_MATCH_PKTTYPE=m CONFIG_NETFILTER_XT_MATCH_LIMIT=m CONFIG_NETFILTER_XT_MATCH_HL=m +CONFIG_NETFILTER_XT_MATCH_TCPMSS=m +CONFIG_NETFILTER_XT_TARGET_TCPMSS=m CONFIG_IP6_NF_MATCH_HL=m # enable IP set support