Browse Source

iptables: disable kernel module autoloading

SVN-Revision: 19917
Jo-Philipp Wich 16 years ago
parent
commit
237df628c3

+ 0 - 4
package/iptables/Makefile

@@ -254,10 +254,6 @@ TARGET_CPPFLAGS := \
 	-I$(LINUX_DIR)/arch/$(LINUX_KARCH)/include \
 	$(TARGET_CPPFLAGS)
 
-TARGET_CFLAGS := \
-	$(TARGET_CFLAGS) \
-	-DFORCE_MODPROBE_PROGRAM="\\\"/sbin/insmod\\\""
-
 CONFIGURE_ARGS += \
 	--enable-shared \
 	--enable-devel \

+ 18 - 0
package/iptables/patches/020-iptables-disable-modprobe.patch

@@ -0,0 +1,18 @@
+--- a/xtables.c
++++ b/xtables.c
+@@ -313,6 +313,7 @@ static char *get_modprobe(void)
+ 
+ int xtables_insmod(const char *modname, const char *modprobe, bool quiet)
+ {
++#if 0
+ 	char *buf = NULL;
+ 	char *argv[4];
+ 	int status;
+@@ -356,6 +357,7 @@ int xtables_insmod(const char *modname, 
+ 	free(buf);
+ 	if (WIFEXITED(status) && WEXITSTATUS(status) == 0)
+ 		return 0;
++#endif
+ 	return -1;
+ }
+ 

+ 0 - 20
package/iptables/patches/020-iptables-force-modprobe-util.patch

@@ -1,20 +0,0 @@
---- a/xtables.c
-+++ b/xtables.c
-@@ -285,6 +285,7 @@ void *xtables_realloc(void *ptr, size_t 
- 
- static char *get_modprobe(void)
- {
-+#ifndef FORCE_MODPROBE_PROGRAM
- 	int procfile;
- 	char *ret;
- 
-@@ -309,6 +310,9 @@ static char *get_modprobe(void)
- 	free(ret);
- 	close(procfile);
- 	return NULL;
-+#else
-+	return strdup(FORCE_MODPROBE_PROGRAM);
-+#endif
- }
- 
- int xtables_insmod(const char *modname, const char *modprobe, bool quiet)