From a3c2b54eb89b24e55e83341d4783f0baaabf6d97 Mon Sep 17 00:00:00 2001 From: sam Date: Thu, 25 Sep 2003 16:12:12 +0000 Subject: note PFIL_HOOKS must be explicitly configured when using IPFILTER --- UPDATING | 7 +++++++ 1 file changed, 7 insertions(+) (limited to 'UPDATING') diff --git a/UPDATING b/UPDATING index 608152f..f0d672e 100644 --- a/UPDATING +++ b/UPDATING @@ -17,6 +17,13 @@ NOTE TO PEOPLE WHO THINK THAT 5.0-CURRENT IS SLOW: developers choose to disable these features on build machines to maximize performance. +20030925: + Configuring a system to use IPFILTER now requires that PFIL_HOOKS + also be explicitly configured. Previously this dependency was + magically handled through some cruft in net/pfil.h; but that has + been removed. Building a kernel with IPFILTER but not PFIL_HOOKS + will fail with obtuse errors in ip_fil.c. + 20030923: Fix a bug in arplookup(), whereby a hostile party on a locally attached network could exhaust kernel memory, and cause a system -- cgit v1.1