summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorTing Liu <b28495@freescale.com>2013-03-08 15:28:32 +0000
committerMatthew McClintock <msm-oss@mcclintock.net>2013-03-08 18:02:49 -0600
commita745325a19d359856eb4d77390e4e4cc69e5f415 (patch)
tree12d395a8151c0cffca98d2bdf474702f064cc69d
parent6a36408201f40a460ace4e84669ad7c762e6c457 (diff)
downloadmeta-fsl-ppc-a745325a19d359856eb4d77390e4e4cc69e5f415.tar.gz
procps: remove customized sysctl.conf which is SDK specific
It was added to disable rp_filter to enhance ASF IP forward performance, which is really fsl SDK specific. Signed-off-by: Ting Liu <b28495@freescale.com>
-rw-r--r--recipes-append/procps/files/sysctl.conf64
-rw-r--r--recipes-append/procps/procps_3.2.8.bbappend3
2 files changed, 1 insertions, 66 deletions
diff --git a/recipes-append/procps/files/sysctl.conf b/recipes-append/procps/files/sysctl.conf
deleted file mode 100644
index 6148472..0000000
--- a/recipes-append/procps/files/sysctl.conf
+++ /dev/null
@@ -1,64 +0,0 @@
1# This configuration file is taken from Debian.
2#
3# /etc/sysctl.conf - Configuration file for setting system variables
4# See sysctl.conf (5) for information.
5#
6
7#kernel.domainname = example.com
8
9# Uncomment the following to stop low-level messages on console
10#kernel.printk = 4 4 1 7
11
12##############################################################3
13# Functions previously found in netbase
14#
15
16# Uncomment the next two lines to enable Spoof protection (reverse-path filter)
17# Turn on Source Address Verification in all interfaces to
18# prevent some spoofing attacks
19net.ipv4.conf.default.rp_filter=0
20net.ipv4.conf.all.rp_filter=0
21
22# Uncomment the next line to enable TCP/IP SYN cookies
23#net.ipv4.tcp_syncookies=1
24
25# Uncomment the next line to enable packet forwarding for IPv4
26#net.ipv4.ip_forward=1
27
28# Uncomment the next line to enable packet forwarding for IPv6
29#net.ipv6.conf.all.forwarding=1
30
31
32###################################################################
33# Additional settings - these settings can improve the network
34# security of the host and prevent against some network attacks
35# including spoofing attacks and man in the middle attacks through
36# redirection. Some network environments, however, require that these
37# settings are disabled so review and enable them as needed.
38#
39# Ignore ICMP broadcasts
40#net.ipv4.icmp_echo_ignore_broadcasts = 1
41#
42# Ignore bogus ICMP errors
43#net.ipv4.icmp_ignore_bogus_error_responses = 1
44#
45# Do not accept ICMP redirects (prevent MITM attacks)
46#net.ipv4.conf.all.accept_redirects = 0
47#net.ipv6.conf.all.accept_redirects = 0
48# _or_
49# Accept ICMP redirects only for gateways listed in our default
50# gateway list (enabled by default)
51# net.ipv4.conf.all.secure_redirects = 1
52#
53# Do not send ICMP redirects (we are not a router)
54#net.ipv4.conf.all.send_redirects = 0
55#
56# Do not accept IP source route packets (we are not a router)
57#net.ipv4.conf.all.accept_source_route = 0
58#net.ipv6.conf.all.accept_source_route = 0
59#
60# Log Martian Packets
61#net.ipv4.conf.all.log_martians = 1
62#
63
64#kernel.shmmax = 141762560
diff --git a/recipes-append/procps/procps_3.2.8.bbappend b/recipes-append/procps/procps_3.2.8.bbappend
index f5d4fd1..8445337 100644
--- a/recipes-append/procps/procps_3.2.8.bbappend
+++ b/recipes-append/procps/procps_3.2.8.bbappend
@@ -1,3 +1,2 @@
1PR_fsl .= "+${DISTRO}.0" 1PRINC := "${@int(PRINC) + 1}"
2 2
3FILESEXTRAPATHS_prepend_fsl := "${THISDIR}/files:"