diff options
author | Ting Liu <b28495@freescale.com> | 2013-03-08 15:28:32 +0000 |
---|---|---|
committer | Matthew McClintock <msm-oss@mcclintock.net> | 2013-03-08 18:02:49 -0600 |
commit | a745325a19d359856eb4d77390e4e4cc69e5f415 (patch) | |
tree | 12d395a8151c0cffca98d2bdf474702f064cc69d | |
parent | 6a36408201f40a460ace4e84669ad7c762e6c457 (diff) | |
download | meta-fsl-ppc-a745325a19d359856eb4d77390e4e4cc69e5f415.tar.gz |
procps: remove customized sysctl.conf which is SDK specific
It was added to disable rp_filter to enhance ASF IP forward
performance, which is really fsl SDK specific.
Signed-off-by: Ting Liu <b28495@freescale.com>
-rw-r--r-- | recipes-append/procps/files/sysctl.conf | 64 | ||||
-rw-r--r-- | recipes-append/procps/procps_3.2.8.bbappend | 3 |
2 files changed, 1 insertions, 66 deletions
diff --git a/recipes-append/procps/files/sysctl.conf b/recipes-append/procps/files/sysctl.conf deleted file mode 100644 index 6148472..0000000 --- a/recipes-append/procps/files/sysctl.conf +++ /dev/null | |||
@@ -1,64 +0,0 @@ | |||
1 | # This configuration file is taken from Debian. | ||
2 | # | ||
3 | # /etc/sysctl.conf - Configuration file for setting system variables | ||
4 | # See sysctl.conf (5) for information. | ||
5 | # | ||
6 | |||
7 | #kernel.domainname = example.com | ||
8 | |||
9 | # Uncomment the following to stop low-level messages on console | ||
10 | #kernel.printk = 4 4 1 7 | ||
11 | |||
12 | ##############################################################3 | ||
13 | # Functions previously found in netbase | ||
14 | # | ||
15 | |||
16 | # Uncomment the next two lines to enable Spoof protection (reverse-path filter) | ||
17 | # Turn on Source Address Verification in all interfaces to | ||
18 | # prevent some spoofing attacks | ||
19 | net.ipv4.conf.default.rp_filter=0 | ||
20 | net.ipv4.conf.all.rp_filter=0 | ||
21 | |||
22 | # Uncomment the next line to enable TCP/IP SYN cookies | ||
23 | #net.ipv4.tcp_syncookies=1 | ||
24 | |||
25 | # Uncomment the next line to enable packet forwarding for IPv4 | ||
26 | #net.ipv4.ip_forward=1 | ||
27 | |||
28 | # Uncomment the next line to enable packet forwarding for IPv6 | ||
29 | #net.ipv6.conf.all.forwarding=1 | ||
30 | |||
31 | |||
32 | ################################################################### | ||
33 | # Additional settings - these settings can improve the network | ||
34 | # security of the host and prevent against some network attacks | ||
35 | # including spoofing attacks and man in the middle attacks through | ||
36 | # redirection. Some network environments, however, require that these | ||
37 | # settings are disabled so review and enable them as needed. | ||
38 | # | ||
39 | # Ignore ICMP broadcasts | ||
40 | #net.ipv4.icmp_echo_ignore_broadcasts = 1 | ||
41 | # | ||
42 | # Ignore bogus ICMP errors | ||
43 | #net.ipv4.icmp_ignore_bogus_error_responses = 1 | ||
44 | # | ||
45 | # Do not accept ICMP redirects (prevent MITM attacks) | ||
46 | #net.ipv4.conf.all.accept_redirects = 0 | ||
47 | #net.ipv6.conf.all.accept_redirects = 0 | ||
48 | # _or_ | ||
49 | # Accept ICMP redirects only for gateways listed in our default | ||
50 | # gateway list (enabled by default) | ||
51 | # net.ipv4.conf.all.secure_redirects = 1 | ||
52 | # | ||
53 | # Do not send ICMP redirects (we are not a router) | ||
54 | #net.ipv4.conf.all.send_redirects = 0 | ||
55 | # | ||
56 | # Do not accept IP source route packets (we are not a router) | ||
57 | #net.ipv4.conf.all.accept_source_route = 0 | ||
58 | #net.ipv6.conf.all.accept_source_route = 0 | ||
59 | # | ||
60 | # Log Martian Packets | ||
61 | #net.ipv4.conf.all.log_martians = 1 | ||
62 | # | ||
63 | |||
64 | #kernel.shmmax = 141762560 | ||
diff --git a/recipes-append/procps/procps_3.2.8.bbappend b/recipes-append/procps/procps_3.2.8.bbappend index f5d4fd1..8445337 100644 --- a/recipes-append/procps/procps_3.2.8.bbappend +++ b/recipes-append/procps/procps_3.2.8.bbappend | |||
@@ -1,3 +1,2 @@ | |||
1 | PR_fsl .= "+${DISTRO}.0" | 1 | PRINC := "${@int(PRINC) + 1}" |
2 | 2 | ||
3 | FILESEXTRAPATHS_prepend_fsl := "${THISDIR}/files:" | ||