xbianonpi / xbian

XBMC on Raspberry Pi, Bleeding Edge
https://xbian.org
GNU General Public License v3.0
294 stars 46 forks source link

Missing kernel module for netfilter security_table #891

Open Rlegault opened 3 years ago

Rlegault commented 3 years ago

Running: Linux xbian 4.19.90+ #1 SMP PREEMPT Wed Dec 18 20:39:10 CET 2019 armv7l GNU/Linux

Attempting to set up firewalling via the AirVPN hummingbird OpenVPN3 binary which sets the tun interface, DNS forwarding and firewalling. It is working well except for the following message:

`iptables v1.8.2 (legacy): can't initialize iptables table "security": Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.'

and...

'ip6tables v1.8.2 (legacy): can't initialize ip6tables table "security": Table does not exist (do you need to insmod?)
Perhaps ip6tables or your kernel needs to be upgraded.`

I had a closer look and it seems that the Xbian kernel does not include the iptables_security module. Is there a way to load this as a loadable kernel module? I think the kernel code is here: linux/net/ipv4/netfilter/iptable_security.c

`$sudo lsmod | grep ip_tables
ip_tables              24576  4 iptable_mangle,iptable_filter,iptable_raw,iptable_nat
x_tables               24576  13 xt_state,iptable_mangle,ip_tables,iptable_filter,iptable_raw,ip6t_REJECT,ip6table_mangle,ip6table_filter,ip6table_raw,ip6t_rt,xt_conntrack,ip6_tables,xt_hl'
mkreisl commented 3 years ago

Our kernel is not build with CONFIG_IP_NF_SECURITY=m, see https://cateee.net/lkddb/web-lkddb/IP_NF_SECURITY.html for example

I see no way to build this module later on without recompiling the entire kernel