From 101344e0d4fc75fd1f71251a3fe60f2f2dd030d2 Mon Sep 17 00:00:00 2001 From: by-gnome Date: Thu, 12 Nov 2020 20:38:09 +0300 Subject: [PATCH] iMX6: linux: enable support for eBPF programs attached to cgroups support BPF/cgroup based firewalling --- projects/NXP/devices/iMX6/linux/linux.arm.conf | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/projects/NXP/devices/iMX6/linux/linux.arm.conf b/projects/NXP/devices/iMX6/linux/linux.arm.conf index a4be7d57b0..ed9f5b7d82 100644 --- a/projects/NXP/devices/iMX6/linux/linux.arm.conf +++ b/projects/NXP/devices/iMX6/linux/linux.arm.conf @@ -136,8 +136,9 @@ CONFIG_CGROUPS=y # CONFIG_CGROUP_DEVICE is not set # CONFIG_CGROUP_CPUACCT is not set # CONFIG_CGROUP_PERF is not set -# CONFIG_CGROUP_BPF is not set +CONFIG_CGROUP_BPF=y # CONFIG_CGROUP_DEBUG is not set +CONFIG_SOCK_CGROUP_DATA=y # CONFIG_NAMESPACES is not set # CONFIG_CHECKPOINT_RESTORE is not set # CONFIG_SCHED_AUTOGROUP is not set @@ -1010,6 +1011,7 @@ CONFIG_XPS=y CONFIG_NET_RX_BUSY_POLL=y CONFIG_BQL=y # CONFIG_BPF_JIT is not set +# CONFIG_BPF_STREAM_PARSER is not set CONFIG_NET_FLOW_LIMIT=y #