kernel: x86* disable alg modules

the application layer gateway modules can used to bypass the nat
via nat slipstreaming. I had disabled all of them. If one is really needed
we can reenable it later.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
This commit is contained in:
Arne Fitzenreiter
2021-03-07 23:52:35 +01:00
parent 9422819d09
commit 82b0e0f13d
4 changed files with 26 additions and 140 deletions

View File

@@ -8966,7 +8966,6 @@ etc/modprobe.d/ipv6.conf
#lib/modules/KVER-ipfire/build/include/config/ip/vs.h
#lib/modules/KVER-ipfire/build/include/config/ip/vs/dh.h
#lib/modules/KVER-ipfire/build/include/config/ip/vs/fo.h
#lib/modules/KVER-ipfire/build/include/config/ip/vs/ftp.h
#lib/modules/KVER-ipfire/build/include/config/ip/vs/ipv6.h
#lib/modules/KVER-ipfire/build/include/config/ip/vs/lblc.h
#lib/modules/KVER-ipfire/build/include/config/ip/vs/lblcr.h
@@ -8978,8 +8977,6 @@ etc/modprobe.d/ipv6.conf
#lib/modules/KVER-ipfire/build/include/config/ip/vs/nfct.h
#lib/modules/KVER-ipfire/build/include/config/ip/vs/nq.h
#lib/modules/KVER-ipfire/build/include/config/ip/vs/ovf.h
#lib/modules/KVER-ipfire/build/include/config/ip/vs/pe
#lib/modules/KVER-ipfire/build/include/config/ip/vs/pe/sip.h
#lib/modules/KVER-ipfire/build/include/config/ip/vs/proto
#lib/modules/KVER-ipfire/build/include/config/ip/vs/proto/ah
#lib/modules/KVER-ipfire/build/include/config/ip/vs/proto/ah.h
@@ -9189,6 +9186,7 @@ etc/modprobe.d/ipv6.conf
#lib/modules/KVER-ipfire/build/include/config/kallsyms/all.h
#lib/modules/KVER-ipfire/build/include/config/kallsyms/base
#lib/modules/KVER-ipfire/build/include/config/kallsyms/base/relative.h
#lib/modules/KVER-ipfire/build/include/config/kcmp.h
#lib/modules/KVER-ipfire/build/include/config/kernel
#lib/modules/KVER-ipfire/build/include/config/kernel.release
#lib/modules/KVER-ipfire/build/include/config/kernel/xz.h
@@ -10211,24 +10209,12 @@ etc/modprobe.d/ipv6.conf
#lib/modules/KVER-ipfire/build/include/config/nf
#lib/modules/KVER-ipfire/build/include/config/nf/conntrack
#lib/modules/KVER-ipfire/build/include/config/nf/conntrack.h
#lib/modules/KVER-ipfire/build/include/config/nf/conntrack/amanda.h
#lib/modules/KVER-ipfire/build/include/config/nf/conntrack/bridge.h
#lib/modules/KVER-ipfire/build/include/config/nf/conntrack/broadcast.h
#lib/modules/KVER-ipfire/build/include/config/nf/conntrack/events.h
#lib/modules/KVER-ipfire/build/include/config/nf/conntrack/ftp.h
#lib/modules/KVER-ipfire/build/include/config/nf/conntrack/h323.h
#lib/modules/KVER-ipfire/build/include/config/nf/conntrack/irc.h
#lib/modules/KVER-ipfire/build/include/config/nf/conntrack/labels.h
#lib/modules/KVER-ipfire/build/include/config/nf/conntrack/mark.h
#lib/modules/KVER-ipfire/build/include/config/nf/conntrack/netbios
#lib/modules/KVER-ipfire/build/include/config/nf/conntrack/netbios/ns.h
#lib/modules/KVER-ipfire/build/include/config/nf/conntrack/pptp.h
#lib/modules/KVER-ipfire/build/include/config/nf/conntrack/procfs.h
#lib/modules/KVER-ipfire/build/include/config/nf/conntrack/sane.h
#lib/modules/KVER-ipfire/build/include/config/nf/conntrack/secmark.h
#lib/modules/KVER-ipfire/build/include/config/nf/conntrack/sip.h
#lib/modules/KVER-ipfire/build/include/config/nf/conntrack/snmp.h
#lib/modules/KVER-ipfire/build/include/config/nf/conntrack/tftp.h
#lib/modules/KVER-ipfire/build/include/config/nf/conntrack/timeout.h
#lib/modules/KVER-ipfire/build/include/config/nf/conntrack/timestamp.h
#lib/modules/KVER-ipfire/build/include/config/nf/conntrack/zones.h
@@ -10239,7 +10225,6 @@ etc/modprobe.d/ipv6.conf
#lib/modules/KVER-ipfire/build/include/config/nf/ct/netlink/timeout.h
#lib/modules/KVER-ipfire/build/include/config/nf/ct/proto
#lib/modules/KVER-ipfire/build/include/config/nf/ct/proto/dccp.h
#lib/modules/KVER-ipfire/build/include/config/nf/ct/proto/gre.h
#lib/modules/KVER-ipfire/build/include/config/nf/ct/proto/sctp.h
#lib/modules/KVER-ipfire/build/include/config/nf/ct/proto/udplite.h
#lib/modules/KVER-ipfire/build/include/config/nf/defrag
@@ -10263,17 +10248,8 @@ etc/modprobe.d/ipv6.conf
#lib/modules/KVER-ipfire/build/include/config/nf/log/netdev.h
#lib/modules/KVER-ipfire/build/include/config/nf/nat
#lib/modules/KVER-ipfire/build/include/config/nf/nat.h
#lib/modules/KVER-ipfire/build/include/config/nf/nat/amanda.h
#lib/modules/KVER-ipfire/build/include/config/nf/nat/ftp.h
#lib/modules/KVER-ipfire/build/include/config/nf/nat/h323.h
#lib/modules/KVER-ipfire/build/include/config/nf/nat/irc.h
#lib/modules/KVER-ipfire/build/include/config/nf/nat/masquerade.h
#lib/modules/KVER-ipfire/build/include/config/nf/nat/pptp.h
#lib/modules/KVER-ipfire/build/include/config/nf/nat/redirect.h
#lib/modules/KVER-ipfire/build/include/config/nf/nat/sip.h
#lib/modules/KVER-ipfire/build/include/config/nf/nat/snmp
#lib/modules/KVER-ipfire/build/include/config/nf/nat/snmp/basic.h
#lib/modules/KVER-ipfire/build/include/config/nf/nat/tftp.h
#lib/modules/KVER-ipfire/build/include/config/nf/reject
#lib/modules/KVER-ipfire/build/include/config/nf/reject/ipv4.h
#lib/modules/KVER-ipfire/build/include/config/nf/reject/ipv6.h
@@ -20816,7 +20792,6 @@ lib/modules/KVER-ipfire/kernel
#lib/modules/KVER-ipfire/kernel/drivers/gpio
#lib/modules/KVER-ipfire/kernel/drivers/gpio/gpio-amd-fch.ko.xz
#lib/modules/KVER-ipfire/kernel/drivers/gpio/gpio-bd9571mwv.ko.xz
#lib/modules/KVER-ipfire/kernel/drivers/gpio/gpio-cs5535.ko.xz
#lib/modules/KVER-ipfire/kernel/drivers/gpio/gpio-ich.ko.xz
#lib/modules/KVER-ipfire/kernel/drivers/gpio/gpio-sch.ko.xz
#lib/modules/KVER-ipfire/kernel/drivers/gpio/gpio-viperboard.ko.xz
@@ -21912,7 +21887,6 @@ lib/modules/KVER-ipfire/kernel
#lib/modules/KVER-ipfire/kernel/drivers/mfd/axp20x.ko.xz
#lib/modules/KVER-ipfire/kernel/drivers/mfd/bcm590xx.ko.xz
#lib/modules/KVER-ipfire/kernel/drivers/mfd/bd9571mwv.ko.xz
#lib/modules/KVER-ipfire/kernel/drivers/mfd/cs5535-mfd.ko.xz
#lib/modules/KVER-ipfire/kernel/drivers/mfd/da9062-core.ko.xz
#lib/modules/KVER-ipfire/kernel/drivers/mfd/da9063.ko.xz
#lib/modules/KVER-ipfire/kernel/drivers/mfd/da9150-core.ko.xz
@@ -23531,9 +23505,6 @@ lib/modules/KVER-ipfire/kernel
#lib/modules/KVER-ipfire/kernel/net/ipv4/netfilter/nf_flow_table_ipv4.ko.xz
#lib/modules/KVER-ipfire/kernel/net/ipv4/netfilter/nf_log_arp.ko.xz
#lib/modules/KVER-ipfire/kernel/net/ipv4/netfilter/nf_log_ipv4.ko.xz
#lib/modules/KVER-ipfire/kernel/net/ipv4/netfilter/nf_nat_h323.ko.xz
#lib/modules/KVER-ipfire/kernel/net/ipv4/netfilter/nf_nat_pptp.ko.xz
#lib/modules/KVER-ipfire/kernel/net/ipv4/netfilter/nf_nat_snmp_basic.ko.xz
#lib/modules/KVER-ipfire/kernel/net/ipv4/netfilter/nf_reject_ipv4.ko.xz
#lib/modules/KVER-ipfire/kernel/net/ipv4/netfilter/nf_socket_ipv4.ko.xz
#lib/modules/KVER-ipfire/kernel/net/ipv4/netfilter/nf_tproxy_ipv4.ko.xz
@@ -23642,42 +23613,24 @@ lib/modules/KVER-ipfire/kernel
#lib/modules/KVER-ipfire/kernel/net/netfilter/ipvs/ip_vs.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/ipvs/ip_vs_dh.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/ipvs/ip_vs_fo.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/ipvs/ip_vs_ftp.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/ipvs/ip_vs_lblc.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/ipvs/ip_vs_lblcr.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/ipvs/ip_vs_lc.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/ipvs/ip_vs_mh.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/ipvs/ip_vs_nq.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/ipvs/ip_vs_ovf.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/ipvs/ip_vs_pe_sip.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/ipvs/ip_vs_rr.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/ipvs/ip_vs_sed.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/ipvs/ip_vs_sh.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/ipvs/ip_vs_wlc.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/ipvs/ip_vs_wrr.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/nf_conncount.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/nf_conntrack_amanda.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/nf_conntrack_broadcast.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/nf_conntrack_ftp.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/nf_conntrack_h323.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/nf_conntrack_irc.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/nf_conntrack_netbios_ns.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/nf_conntrack_netlink.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/nf_conntrack_pptp.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/nf_conntrack_sane.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/nf_conntrack_sip.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/nf_conntrack_snmp.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/nf_conntrack_tftp.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/nf_flow_table.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/nf_flow_table_inet.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/nf_log_common.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/nf_log_netdev.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/nf_nat.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/nf_nat_amanda.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/nf_nat_ftp.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/nf_nat_irc.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/nf_nat_sip.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/nf_nat_tftp.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/nf_synproxy_core.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/nfnetlink_acct.ko.xz
#lib/modules/KVER-ipfire/kernel/net/netfilter/nfnetlink_cthelper.ko.xz