public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

linux: remove canDisableNetfilterConntrackHelpers feature

Browse Source 
This feature is available in all kernels in nixpkgs.
This commit is contained in:
Franz Pletz
2017-01-25 00:28:55 +01:00
parent 4a914f2f9f
commit 403fdd737e
13 changed files with 1 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nixos/modules/services/networking/firewall.nix
-3
View File
@@ -41,7 +41,6 @@ let
kernelPackages = config.boot.kernelPackages;
kernelHasRPFilter = kernelPackages.kernel.features.netfilterRPFilter or false;
kernelCanDisableHelpers = kernelPackages.kernel.features.canDisableNetfilterConntrackHelpers or false;
helpers =
''
@@ -512,8 +511,6 @@ in
assertions = [ { assertion = (cfg.checkReversePath != false) || kernelHasRPFilter;
message = "This kernel does not support rpfilter"; }
{ assertion = cfg.autoLoadConntrackHelpers || kernelCanDisableHelpers;
message = "This kernel does not support disabling conntrack helpers"; }
];
systemd.services.firewall = {