From 616650627d1300af0f2ef56caf30901379ef5597 Mon Sep 17 00:00:00 2001 From: Norihiko Hama Date: Mon, 29 May 2023 16:54:58 +0900 Subject: [PATCH] ANDROID: gki_defconfig: enable CONFIG_SYN_COOKIES Enable CONFIG_SYN_COOKIES to support SYN cookies against attack "SYN flooding". This also makes GKI on arm64 consistent with GKI on x86. According to kernel dev-team, this does not affect the KMI. Bug: 349649090 Bug: 278043288 Change-Id: If43951b0ce3028e65799f9b6e68106ca98ee980e Signed-off-by: Norihiko Hama --- arch/arm64/configs/gki_defconfig | 1 + arch/x86/configs/gki_defconfig | 1 + 2 files changed, 2 insertions(+) diff --git a/arch/arm64/configs/gki_defconfig b/arch/arm64/configs/gki_defconfig index 13a85324afbb..b216e097b27e 100644 --- a/arch/arm64/configs/gki_defconfig +++ b/arch/arm64/configs/gki_defconfig @@ -151,6 +151,7 @@ CONFIG_IP_MULTIPLE_TABLES=y CONFIG_NET_IPIP=y CONFIG_NET_IPGRE_DEMUX=y CONFIG_NET_IPGRE=y +CONFIG_SYN_COOKIES=y CONFIG_NET_IPVTI=y CONFIG_INET_ESP=y CONFIG_INET_UDP_DIAG=y diff --git a/arch/x86/configs/gki_defconfig b/arch/x86/configs/gki_defconfig index debf9895c937..696d631131ab 100644 --- a/arch/x86/configs/gki_defconfig +++ b/arch/x86/configs/gki_defconfig @@ -141,6 +141,7 @@ CONFIG_IP_MULTIPLE_TABLES=y CONFIG_NET_IPIP=y CONFIG_NET_IPGRE_DEMUX=y CONFIG_NET_IPGRE=y +CONFIG_SYN_COOKIES=y CONFIG_NET_IPVTI=y CONFIG_INET_ESP=y CONFIG_INET_UDP_DIAG=y