aboutsummaryrefslogtreecommitdiffstats
path: root/net/netfilter/Kconfig
diff options
context:
space:
mode:
authorFernando Fernandez Mancera <ffmancera@riseup.net>2018-07-25 01:32:46 +0200
committerPablo Neira Ayuso <pablo@netfilter.org>2018-07-30 14:07:11 +0200
commitb96af92d6eaf9fadd77aa798c508a8a9d2e60020 (patch)
tree51f8582536358092766850caa6be824c2270a93a /net/netfilter/Kconfig
parentnetfilter: nfnetlink_osf: extract nfnetlink_subsystem code from xt_osf.c (diff)
downloadlinux-dev-b96af92d6eaf9fadd77aa798c508a8a9d2e60020.tar.xz
linux-dev-b96af92d6eaf9fadd77aa798c508a8a9d2e60020.zip
netfilter: nf_tables: implement Passive OS fingerprint module in nft_osf
Add basic module functions into nft_osf.[ch] in order to implement OSF module in nf_tables. Signed-off-by: Fernando Fernandez Mancera <ffmancera@riseup.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netfilter/Kconfig')
-rw-r--r--net/netfilter/Kconfig7
1 files changed, 7 insertions, 0 deletions
diff --git a/net/netfilter/Kconfig b/net/netfilter/Kconfig
index 85333431e524..16fdfb75efb5 100644
--- a/net/netfilter/Kconfig
+++ b/net/netfilter/Kconfig
@@ -627,6 +627,13 @@ config NFT_SOCKET
This option allows matching for the presence or absence of a
corresponding socket and its attributes.
+config NFT_OSF
+ tristate "Netfilter nf_tables passive OS fingerprint support"
+ depends on NETFILTER_ADVANCED
+ select NETFILTER_NETLINK_OSF
+ help
+ This option allows matching packets from an specific OS.
+
if NF_TABLES_NETDEV
config NF_DUP_NETDEV