Skip to content

Commit

Permalink
CHROMIUM: config: Enable multiple IPv6 routing tables
Browse files Browse the repository at this point in the history
For various security reasons, third party VPNs do not tunnel all
system network traffic; they only tunnel traffic owned by the chronos
user.  chronos traffic is diverted to a separate routing table by
firewalld using `ip rule` and iptables XT_MATCH_OWNER.

Currently this is only enabled for IPv4 traffic.  It should be enabled
for both IPv4 and IPv6.  The first step in making this happen is to
enable kernel support for multiple IPv6 routing tables on all platforms.

BUG=chromium:522003
TEST=manual

Change-Id: Ia033eaa3ba15e89f2666ae08a6910a09f877439d
Signed-off-by: Kevin Cernekee <cernekee@chromium.org>
Reviewed-on: https://chromium-review.googlesource.com/323551
Reviewed-by: Filipe Brandenburger <filbranden@chromium.org>
  • Loading branch information
Kevin Cernekee authored and chrome-bot committed Jan 26, 2016
1 parent 2d6f664 commit 53f1b9f
Show file tree
Hide file tree
Showing 9 changed files with 1 addition and 8 deletions.
1 change: 0 additions & 1 deletion chromeos/config/arm64/chromiumos-arm64.flavour.config
Original file line number Diff line number Diff line change
Expand Up @@ -42,7 +42,6 @@ CONFIG_I2C_MT65XX=y
# CONFIG_IIO_CROS_EC_SENSORS is not set
# CONFIG_IIO_CROS_EC_SENSORS_CORE is not set
# CONFIG_IIO_SYSFS_TRIGGER is not set
# CONFIG_IPV6_MULTIPLE_TABLES is not set
CONFIG_KEYBOARD_CROS_EC=y
CONFIG_MEDIATEK_WATCHDOG=y
CONFIG_MEMORY_ISOLATION=y
Expand Down
1 change: 0 additions & 1 deletion chromeos/config/arm64/chromiumos-mediatek.flavour.config
Original file line number Diff line number Diff line change
Expand Up @@ -44,7 +44,6 @@ CONFIG_I2C_MT65XX=y
# CONFIG_IIO_CROS_EC_SENSORS is not set
# CONFIG_IIO_CROS_EC_SENSORS_CORE is not set
# CONFIG_IIO_SYSFS_TRIGGER is not set
# CONFIG_IPV6_MULTIPLE_TABLES is not set
CONFIG_KEYBOARD_CROS_EC=y
CONFIG_MEDIATEK_WATCHDOG=y
CONFIG_MEMORY_ISOLATION=y
Expand Down
1 change: 0 additions & 1 deletion chromeos/config/arm64/chromiumos-tegra64.flavour.config
Original file line number Diff line number Diff line change
Expand Up @@ -212,7 +212,6 @@ CONFIG_IIO_SYSFS_TRIGGER=y
CONFIG_IIO_TRIGGERED_BUFFER=y
# CONFIG_INFINIBAND is not set
# CONFIG_IP1000 is not set
CONFIG_IPV6_MULTIPLE_TABLES=y
# CONFIG_IPV6_SUBTREES is not set
# CONFIG_IPW2100 is not set
# CONFIG_IPW2200 is not set
Expand Down
1 change: 0 additions & 1 deletion chromeos/config/armel/chromiumos-arm.flavour.config
Original file line number Diff line number Diff line change
Expand Up @@ -248,7 +248,6 @@ CONFIG_IOMMU_API=y
# CONFIG_IOMMU_IO_PGTABLE_LPAE is not set
CONFIG_IOMMU_SUPPORT=y
# CONFIG_IPV6_MROUTE is not set
# CONFIG_IPV6_MULTIPLE_TABLES is not set
# CONFIG_JOYSTICK_A3D is not set
# CONFIG_JOYSTICK_ADI is not set
# CONFIG_JOYSTICK_ANALOG is not set
Expand Down
1 change: 0 additions & 1 deletion chromeos/config/armel/chromiumos-armada38x.flavour.config
Original file line number Diff line number Diff line change
Expand Up @@ -180,7 +180,6 @@ CONFIG_INPUT_MOUSEDEV_SCREEN_Y=768
# CONFIG_IP1000 is not set
CONFIG_IPV6_MROUTE=y
# CONFIG_IPV6_MROUTE_MULTIPLE_TABLES is not set
CONFIG_IPV6_MULTIPLE_TABLES=y
# CONFIG_IPV6_PIMSM_V2 is not set
# CONFIG_IPV6_SUBTREES is not set
# CONFIG_IPW2100 is not set
Expand Down
1 change: 1 addition & 0 deletions chromeos/config/base.config
Original file line number Diff line number Diff line change
Expand Up @@ -635,6 +635,7 @@ CONFIG_IPC_NS=y
CONFIG_IPV6=y
# CONFIG_IPV6_GRE is not set
# CONFIG_IPV6_MIP6 is not set
CONFIG_IPV6_MULTIPLE_TABLES=y
CONFIG_IPV6_NDISC_NODETYPE=y
# CONFIG_IPV6_OPTIMISTIC_DAD is not set
# CONFIG_IPV6_ROUTER_PREF is not set
Expand Down
1 change: 0 additions & 1 deletion chromeos/config/i386/common.config
Original file line number Diff line number Diff line change
Expand Up @@ -787,7 +787,6 @@ CONFIG_IO_DELAY_TYPE_UDELAY=2
# CONFIG_IO_DELAY_UDELAY is not set
# CONFIG_IP1000 is not set
# CONFIG_IPV6_MROUTE is not set
# CONFIG_IPV6_MULTIPLE_TABLES is not set
CONFIG_IRQ_DOMAIN=y
# CONFIG_IRQ_DOMAIN_DEBUG is not set
CONFIG_IRQ_FORCED_THREADING=y
Expand Down
1 change: 0 additions & 1 deletion chromeos/config/mips/common.config
Original file line number Diff line number Diff line change
Expand Up @@ -209,7 +209,6 @@ CONFIG_INPUT_UINPUT=m
# CONFIG_INPUT_YEALINK is not set
# CONFIG_IOMMU_SUPPORT is not set
# CONFIG_IPV6_MROUTE is not set
# CONFIG_IPV6_MULTIPLE_TABLES is not set
CONFIG_IRQ_CPU=y
CONFIG_IRQ_FORCED_THREADING=y
CONFIG_ISA_DMA_API=y
Expand Down
1 change: 0 additions & 1 deletion chromeos/config/x86_64/common.config
Original file line number Diff line number Diff line change
Expand Up @@ -891,7 +891,6 @@ CONFIG_IO_DELAY_TYPE_UDELAY=2
# CONFIG_IO_DELAY_UDELAY is not set
# CONFIG_IP1000 is not set
# CONFIG_IPV6_MROUTE is not set
# CONFIG_IPV6_MULTIPLE_TABLES is not set
# CONFIG_IPW2100 is not set
# CONFIG_IPW2200 is not set
CONFIG_IRQCHIP=y
Expand Down

0 comments on commit 53f1b9f

Please sign in to comment.