From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id E4C1E1396D9 for ; Sat, 28 Oct 2017 19:06:18 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 0DC1B2BC12B; Sat, 28 Oct 2017 19:06:14 +0000 (UTC) Received: from w1.tutanota.de (w1.tutanota.de [81.3.6.162]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 8F6022BC123 for ; Sat, 28 Oct 2017 19:06:13 +0000 (UTC) Received: from localhost (unknown [127.0.0.1]) by w1.tutanota.de (Postfix) with ESMTP id 75CB1FB1AE6 for ; Sat, 28 Oct 2017 19:06:12 +0000 (UTC) Received: from w1.tutanota.de ([127.0.0.1]) by localhost (w1.tutanota.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2yTgqUWEyRrH for ; Sat, 28 Oct 2017 21:06:10 +0200 (CEST) Received: from w1.tutanota.de (unknown [192.168.1.162]) by w1.tutanota.de (Postfix) with ESMTP id BAAD1FB1BA1 for ; Sat, 28 Oct 2017 19:06:08 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=tutanota.com; s=20161216; t=1509217568; bh=GQwNEXnZSmS0nnK43BGIgiWeg+CzmmfKV0gGQM0kF6I=; h=Date:From:To:In-Reply-To:References:Subject:From; b=zcx2FUg6xlRRlE1SHMJz213/5s5ZpgYHu8KCG7YThJya4cHGH1Va+n68xIvz5bQFe CvTmvTREXROCnYwha13LNLRqQeJAR0eCKAvdRUwX4cF6xUNss0+TTo9RNTwioj2iAG 3++z+UEWqZK7HskZ17Uteo4cH8WMmvToYDeiJyRwTttEmsa0/3EIPlSVWIE5L132r6 TgNOX9GAHAnm8FgWIyKSzTpjHwYbNxwBfB0GDlGgLFsuK4o36HLd7P/F2qoqAAPJzD 1MbjZEOEqErHnPoWJMryHufi67a/BTtu9RSpSq3y7jYmJXnyCil+WsHkF5zplUThM1 4VHLnnjZvnRdA== Date: Sat, 28 Oct 2017 21:06:08 +0200 (CEST) From: To: Message-ID: In-Reply-To: References: <> <> <> Subject: Re: [gentoo-user] Re: systemd: "local system does not support BPF/cgroup based firewalling" Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_168422_67914811.1509217568747" X-Archives-Salt: dfa54e4c-4065-440a-8c6a-3b561f57cc85 X-Archives-Hash: 2fd9bc40d8213826909b35c5fac6a993 ------=_Part_168422_67914811.1509217568747 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable you should update the kernel anyway.=C2=A0 some serious security holes have= recently been found and corrected in the newest kernel. mad.scientist.at.large (a good madscientist) -- "The U.S. intelligence community concluded in a report made public in Janua= ry that the Kremlin sought to disrupt the 2016 election and sway the race i= n Trump's favor."=C2=A0 From "thehill.com".=C2=A0 Only Trump and his duplic= itous supports try to say it was Clinton who conspired.=C2=A0 Frankly Trump= is likely guilty of treason, the sooner he's impeached and indited the bet= ter, along with ALL of his supporters in goverment. 28. Oct 2017 12:58 by caneko@gmail.com: > On Sat, Oct 28, 2017 at 1:44 PM, Nikos Chantziaras <> realnc@gmail.com> >= wrote: > > > > There is no such kernel option. > > Yes, there is[1]. However, there is no such option for kernel version 4.9= [2], although there is for 4.10[3]. I think that's the problem, for using t= he firewall BPF options of systemd, you'll need to use kernel version >=3D = 4.10. > Regards. > [1] > https://github.com/torvalds/linux/blob/master/init/Kconfig#L848> [2= ]=C2=A0> https://github.com/torvalds/linux/blob/v4.9/init/Kconfig> [3] > ht= tps://github.com/torvalds/linux/blob/v4.10/init/Kconfig#L1157 > -- > Dr. Canek Pel=C3=A1ez Vald=C3=A9s > Profesor de Carrera Asociado C > Departamento de Matem=C3=A1ticas > Facultad de Ciencias > Universidad Nacional Aut=C3=B3noma de M=C3=A9xico ------=_Part_168422_67914811.1509217568747 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable you should update the kernel anyway.  some serious security holes have= recently been found and corrected in the newest kernel.

mad.sci= entist.at.large (a good madscientist)
--
"The U.S. intelligence community concluded in a report made publ= ic in=20 January that the Kremlin sought to disrupt the 2016 election and sway=20 the race in Trump's favor."  From "thehill.com".  = Only Trump and his duplicitous supports try to say it was Clinton who consp= ired.  Frankly Trump is likely guilty of treason, the sooner he's impe= ached and indited the better, along with ALL of his supporters in goverment= .


28. Oct 2017 12:58 by caneko@gmail.com:
=
On Sat, Oct 28, 2017 a= t 1:44 PM, Nikos Chantziaras <realnc@gmail.com> wrote:
>
> There is no such kernel option.

Yes, there is[1= ]. However, there is no such option for kernel version 4.9[2], although the= re is for 4.10[3]. I think that's the problem, for using the firewall BPF o= ptions of systemd, you'll need to use kernel version >=3D 4.10.

Regards.

[3] https://github.com/to= rvalds/linux/blob/v4.10/init/Kconfig#L1157
--
Dr. Canek Pel&a= acute;ez Valdés
Profesor de Carrera Asociado C
Departament= o de Matemáticas
Facultad de Ciencias
Universidad Nacional= Autónoma de México
------=_Part_168422_67914811.1509217568747--