Re: [gentoo-user] Re: systemd: "local system does not support BPF/cgroup based firewalling"

you should update the kernel anyway.  some serious security holes have recently been found and corrected in the newest kernel.

mad.scientist.at.large (a good madscientist)
--
"The U.S. intelligence community concluded in a report made public in January that the Kremlin sought to disrupt the 2016 election and sway the race in Trump's favor."  From "thehill.com".  Only Trump and his duplicitous supports try to say it was Clinton who conspired.  Frankly Trump is likely guilty of treason, the sooner he's impeached and indited the better, along with ALL of his supporters in goverment.


28. Oct 2017 12:58 by caneko@×××××.com:


> On Sat, Oct 28, 2017 at 1:44 PM, Nikos Chantziaras <> realnc@×××××.com> > wrote:
> >
> > There is no such kernel option.
>
> Yes, there is[1]. However, there is no such option for kernel version 4.9[2], although there is for 4.10[3]. I think that's the problem, for using the firewall BPF options of systemd, you'll need to use kernel version >= 4.10.
> Regards.
> [1] > https://github.com/torvalds/linux/blob/master/init/Kconfig#L848> [2] > https://github.com/torvalds/linux/blob/v4.9/init/Kconfig> [3] > https://github.com/torvalds/linux/blob/v4.10/init/Kconfig#L1157
> --
> Dr. Canek Peláez Valdés
> Profesor de Carrera Asociado C
> Departamento de Matemáticas
> Facultad de Ciencias
> Universidad Nacional Autónoma de México