Bug#868803: linux-image-4.11.0-1-amd64: config options CONFIG_NFT_FIB_IPV[4|6] should be set

[Eric Leblond <eric@regit.org>]

Package: src:linux
Version: 4.11.6-1
Severity: normal

Dear Maintainer,

The CONFIG_NFT_FIB_IPV4 and CONFIG_NFT_FIB_IPV46 should be build by
default in the kernel. This two options are mandatory to implement
reverse path filtering with nftables for Ipv4 and IPv6 protocol.
This functionality is a must have for security of Linux based
firewall.

Best regards,

-- Package-specific info:
** Version:
Linux version 4.11.0-1-amd64 (debian-kernel@lists.debian.org) (gcc
version 6.3.0 20170516 (Debian 6.3.0-18) ) #1 SMP Debian 4.11.6-1
(2017-06-19)

** Command line:
BOOT_IMAGE=/boot/vmlinuz-4.11.0-1-amd64 root=UUID=cae47d6a-d3bb-4407-
a218-0c8c8320d811 ro quiet

** Tainted: O (4096)
 * Out-of-tree module has been loaded.

-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.11.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8),
LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages linux-image-4.11.0-1-amd64 depends on:
ii  initramfs-tools [linux-initramfs-tool]  0.130
ii  kmod                                    24-1
ii  linux-base                              4.5

Versions of packages linux-image-4.11.0-1-amd64 recommends:
ii  firmware-linux-free  3.4
ii  irqbalance           1.1.0-2.3

Versions of packages linux-image-4.11.0-1-amd64 suggests:
pn  debian-kernel-handbook  <none>
ii  extlinux                3:6.03+dfsg-14.1
ii  grub-pc                 2.02-2
pn  linux-doc-4.11          <none>

Versions of packages linux-image-4.11.0-1-amd64 is related to:
pn  firmware-amd-graphics     <none>
pn  firmware-atheros          <none>
pn  firmware-bnx2             <none>
pn  firmware-bnx2x            <none>
pn  firmware-brcm80211        <none>
pn  firmware-cavium           <none>
pn  firmware-intel-sound      <none>
pn  firmware-intelwimax       <none>
pn  firmware-ipw2x00          <none>
pn  firmware-ivtv             <none>
ii  firmware-iwlwifi          20161130-3
pn  firmware-libertas         <none>
pn  firmware-linux-nonfree    <none>
pn  firmware-misc-nonfree     <none>
pn  firmware-myricom          <none>
pn  firmware-netxen           <none>
pn  firmware-qlogic           <none>
pn  firmware-realtek          <none>
pn  firmware-samsung          <none>
pn  firmware-siano            <none>
pn  firmware-ti-connectivity  <none>
pn  xen-hypervisor            <none>

-- no debconf information
-- 
Eric Leblond <eric@regit.org>
Blog: https://home.regit.org/