netfilter: kconfig: nat related expression depend on nftables core
authorFlorian Westphal <fw@strlen.de>
Fri, 24 Aug 2018 23:14:46 +0000 (01:14 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Fri, 31 Aug 2018 17:07:10 +0000 (19:07 +0200)
commite0758412208960be9de11e6d2350c81ffd88410f
tree09e7dac17e37baf90ffb0c9c811076b6e9b8050b
parent0434ccdcf883e53ec7156a6843943e940dc1feb8
netfilter: kconfig: nat related expression depend on nftables core

NF_TABLES_IPV4 is now boolean so it is possible to set

NF_TABLES=m
NF_TABLES_IPV4=y
NFT_CHAIN_NAT_IPV4=y

which causes:
nft_chain_nat_ipv4.c:(.text+0x6d): undefined reference to `nft_do_chain'

Wrap NFT_CHAIN_NAT_IPV4 and related nat expressions with NF_TABLES to
restore the dependency.

Reported-by: Randy Dunlap <rdunlap@infradead.org>
Fixes: 02c7b25e5f54 ("netfilter: nf_tables: build-in filter chain type")
Signed-off-by: Florian Westphal <fw@strlen.de>
Acked-by: Randy Dunlap <rdunlap@infradead.org>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/ipv4/netfilter/Kconfig