Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Missing kernel module for netfilter security_table #891

Open
Rlegault opened this issue Jan 26, 2021 · 1 comment
Open

Missing kernel module for netfilter security_table #891

Rlegault opened this issue Jan 26, 2021 · 1 comment

Comments

@Rlegault
Copy link

Running: Linux xbian 4.19.90+ #1 SMP PREEMPT Wed Dec 18 20:39:10 CET 2019 armv7l GNU/Linux

Attempting to set up firewalling via the AirVPN hummingbird OpenVPN3 binary which sets the tun interface, DNS forwarding and firewalling. It is working well except for the following message:

`iptables v1.8.2 (legacy): can't initialize iptables table "security": Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.'

and...

'ip6tables v1.8.2 (legacy): can't initialize ip6tables table "security": Table does not exist (do you need to insmod?)
Perhaps ip6tables or your kernel needs to be upgraded.`

I had a closer look and it seems that the Xbian kernel does not include the iptables_security module. Is there a way to load this as a loadable kernel module? I think the kernel code is here: linux/net/ipv4/netfilter/iptable_security.c

`$sudo lsmod | grep ip_tables
ip_tables              24576  4 iptable_mangle,iptable_filter,iptable_raw,iptable_nat
x_tables               24576  13 xt_state,iptable_mangle,ip_tables,iptable_filter,iptable_raw,ip6t_REJECT,ip6table_mangle,ip6table_filter,ip6table_raw,ip6t_rt,xt_conntrack,ip6_tables,xt_hl'
@mkreisl
Copy link
Contributor

mkreisl commented Jan 26, 2021

Our kernel is not build with CONFIG_IP_NF_SECURITY=m, see https://cateee.net/lkddb/web-lkddb/IP_NF_SECURITY.html for example

I see no way to build this module later on without recompiling the entire kernel

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants