From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from sonic303-28.consmr.mail.ne1.yahoo.com (sonic303-28.consmr.mail.ne1.yahoo.com [66.163.188.154]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 26AE235C6B2 for ; Fri, 11 Sep 2026 18:17:26 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=66.163.188.154 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789150652; cv=none; b=IarAA8lu4IP7q+A2IcG69HmlMDJkUQwfmaxgIjL43OxTeyYQihoHqAJiulcwR1B6OWv2MHZCwSN91C3Fl/gibak2k87IyN0YqnouWs3wXIKFNPFaU3Z+Ip88pk8rkhwVOPeNMuQB7J9Bx55ilXyVig+g/dblWaofjBlLYOXyTMo= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789150652; c=relaxed/simple; bh=Z57Iku1thXyXrd/tJuHixAzTq3I2TFBtAiDxp2vv5n8=; h=Message-ID:Date:MIME-Version:Subject:To:Cc:References:From: In-Reply-To:Content-Type; b=Ov6I+tm0zd3i46cRIjeBm3qdyWtR29lajPy7fVSrG+1CCgzQGVv14jON3JZjacYWDj+T/oBhXwwCWRVWFMCFnEXwUm4jMhpjfBQZVp1ZB/2MnoJucaNQF2jZKgHnp6a5yKwkd+pB+eWBtpZ18WnQ/nm3q1oi8cFvqIS0gA2gdK8= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=schaufler-ca.com; spf=none smtp.mailfrom=schaufler-ca.com; dkim=pass (2048-bit key) header.d=yahoo.com header.i=@yahoo.com header.b=TkSR3elr; arc=none smtp.client-ip=66.163.188.154 Authentication-Results: smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=schaufler-ca.com Authentication-Results: smtp.subspace.kernel.org; spf=none smtp.mailfrom=schaufler-ca.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=yahoo.com header.i=@yahoo.com header.b="TkSR3elr" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1789150644; bh=N0ksFx+o56aUgsrzSCG07cwcgBEXSZlDOBLwLo9KB9k=; h=Date:Subject:To:Cc:References:From:In-Reply-To:From:Subject:Reply-To; b=TkSR3elrVRBeya1bhpxr467XLIHXJIKepJDUpmqLkQAmS0tGfNvpMHxja7yUeuVWxaAzYNo3hMfi17ANOm295fXOqN30bEMUwqmodFOEtzK9WX3G6yuskG9ZitgjQDssnDLqamjvcD4zICwb9aGh7/KnhvoTT2lJiGoNqeyZlB9nYBbzDMIfH0UbUQDt0VPfjqLxRFn4VUgdepkCvjLUViz3jbnjmuwfKCVAF4UjQS9v7YIlpm5F7ekV4wuWyjIGcN6ORJk93Oy78ZXftUo5j27zngjLKBnxe/S3yaEuo5/dwwkHwuOk2KbcR+5J6SsZHKcHCnnnIw1qt7Eqhu+oUg== X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1789150644; bh=88I/ZJgzKsQA/61xT9syFytUpPRiFM2POS/6TWEUrqV=; h=X-Sonic-MF:Date:Subject:To:From:From:Subject; b=gjx+22uS8kYrcD68KMK9dnwhSiLvmiWB5TUzPDMCFcpGj7VAvJzQS3W4gx0mIa3awUYOG99/2mCcYGwo8VAbqcsCpFP6v/PBWPzQ5In60WSx9yFfho12jqaJsAlDhaBfUoJMDuqz3EWMC570KOgbZ1xe0IeKCVOxALS+fWaAfD+MBjWueO+JNnS3LnDDz7/b+bsWesulg0vGlAYB2TWfjT8wtoe4LjPzDC1jAWPkKU8u3q02oEWMZdyTJl7fiyoMPDM/ev4eevCK6N9PnZ2/ZwsUsPvKye/WzGlo+x3OGmwD1RWuCdxr03RcVOzn9acKtwiU5p1/lHZPETq6ISWZtg== X-YMail-OSG: Z9UMG9YVM1lctHC24HnZvwkpAFOQdH7gglIMIGoN9uePiY6tmM1qasTJ0aPnTzX tzt29oMHmILoCJ0h7IC3u49YVUVYpMiAR3DOapJZF7js1zavVTijW7mz6eDy0Aknu2cJAIMBsqct C3ya42KOnkk9oeom.b.QTEgcQUSRb.xUyEOV838qqsLQzKYF7X4scufuZH2ZMtPbL4WXhFrvUpaa b2h7qJsroiEU4KnSo_4R743CTWkEixpeInkhNH0gSxv83Oy2Qp2WDEFOmBoIryMYglQrGdPXsoBd pWMZwxUFVMji3.9WaIrRLWEwU0aCVr.y7dg7LlQywAhwgodXzjq7xYZrwHNyfNkFOZOORAsIxvzh T2.QUhV.JpcG1Fb6DrNXHkSYUzD9f0kby6nX1oVX_X3RSxKW_gdPGix0Yg2F.SZCIlWjZiWlfSct EHuva2iR3235_wLAiNbAoBnNIA0auBPdbrWlPKgBy8dD1rjj1N.QzBmZteeApzGC5cTnvC6GdB_Y pj2GFD41VlRPuSGzC1TI4dE8UtcO9WCWDGJJ.N9ljlE7ridZHp5sXcvrlb2a1bJn8b8g.gM_k0Y. rhnpwwCd5hEjjm.jA8eaExquIyZEltU8Mn8S09036R4ZIVIUqtSgx2_UM_72JpAgdr93yUloY4Ni ZkPaUGtv8xsIZjdsKhzb9Di_L2bWvEmHR1tEWk0sRpWSJgpkcV4TInr7E.FKZCDYRWAgpQas1uQJ 1TOZ6fnSFy0FwYnc34A27vgJO53IRnC3i1fXQzozdz_ciT8l.ZAKAjYby7iyEEUlPZ7AuInZrPza IEdzUZNoQry0p.FCLskNePKfkzaolmO7kf1Xy1P9r1wU3jjfCqpzfxKG3gMpYwfVAsVNnOv6gDzl McJQL.IE2U_X9ZGVZjg4rkSvsjGUx_bL4lOIDeQWj5nb8EO_hS3ZFeOXVa76rEtJBTamfTTW_7Zc elKXzO0c0jsF_iGOvV2sX9TtagZFju13DPJgDpCFgKnK8RfROr.IP761grH7JdkzCRfBscbKj8k7 Ahwv8KwS_qMFpGCZsVnKIueTdlB7CJitfx_aC17KoiI.w5vP5MeCFnyYnZ36ZuvoA4KiKo_Ncwrm CZCI96cIwehGcjN454ZgHYgmbxlMsQdtxl0ALCXIEd231qZxI5r3jKKzqWBRQBT6wyOE.JLSQXU3 bZlUojN5mC7Gx19NhnLlG.lg751JnoD40Ciw_ysQAywCq2134cpLDvJiqE5XaWXg_KeWNaSx07Rp Z.Hp4cWssIRHg5vMk_aZs5Z7gP2r111AT0tPqB.Zl36I7EcMncMSuoK6TpjUpeCFPNA2Uzn6lWpv Ayq9XnDzPBBYPg3Z5Yq8pSj2VM5qO2prq6fi4wRQysNvd_1lqrs3VtFc9ydPyX8RD8VYVSxv1uJ1 FB2N7hJH1gYewxLqD1TrMgTjhWKaalb0ZCqhrFy0PdSKktKHFroGOPZfZWAV4mekQimDDZkSUtnC yw.h8nHeNuzHO8V0HTM_P4nsUeGGf6aLnKrOA9cgDr2U7b1pfnZjwOEC9f3OwqLxHVtN7DxbxRBt XbRaMJ0t0JXpnmzFjCEwxOIe4YxMA79ojl0uBwAtD0Fy0woxF6BF3RJ1ZPPU0_PUXxNYTPAv797g hCvs4V7D7ilhn2pHF7zgioCgAymlDwbbb1kS25sFEgT.ab0mYvR_DTYvZdm8xvptaKga9_3Q_4la Nfg7LDwLu90rXbR_jFSVDg8_CRrWzNGZoExyv2KC5Ioxx4w5Z.vFZMm71aSdZqcz97awS9O27LEy zOpyEkEiGjFrw1cgZZtyu3Ew0HqIQ0h4xkl52jQ4XgT.30ChKEVFYvIV7iuJxGT28kntbVLk7n5h Qgdut7ArndRx8PCSev3URpMnf8AM0zR8NhPyD_xl.PBWGf9W2RDA6RRWpdjmgFHBTId2lKL_nSJl LkxGwDO7rDn_SxbCFne8eoKNae0qOWs798diQQVJL0Ddb8aFSC4LFGAwrr_d22T4W8yy.Ndfb49y z2dOYbOpJhAl12Ftt1XOzJGQFgwPv5Q_tiwpkT27_1AfToPZ2tfNNwEU5LXsoecZNMjPL637Fs88 Pm9FtfEyd0XJbD1XOE.f.OBlHHpbiaJgp4mXcZx0q4HZOY4DX10_8VcqfbSEaXrmk1KmYyVyvbHM 3QxDwZXAF5FNMwXncGbQWYGe_Azdm2WnLc5rY4RP0yu0DZzoy5yQFXvQ.VZQ0.Ig5LzjCVNNskre .fT9yhcSlPWI3IHZaEsNbS3ASejCKAAQtyEkTugxQ5eM1GTORRydzR8ohwGmxc5gursUvWq1obkV s1L1HzWgkFSZ7 X-Sonic-MF: X-Sonic-ID: b76ab4a0-2ab9-47b3-8cf5-8bdd5faf0803 Received: from sonic.gate.mail.ne1.yahoo.com by sonic303.consmr.mail.ne1.yahoo.com with HTTP; Fri, 11 Sep 2026 18:17:24 +0000 Received: by hermes--production-gq1-678d9dd684-kwnw4 (Yahoo Inc. Hermes SMTP Server) with ESMTPA ID 399694003e99ff36e3a7b206375e9b12; Fri, 11 Sep 2026 17:46:02 +0000 (UTC) Message-ID: Date: Fri, 11 Sep 2026 10:46:00 -0700 Precedence: bulk X-Mailing-List: linux-rdma@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH 01/13 net-next] net: ipv4: introduce CONFIG_IPV4 to decouple the IPv4 stack To: Fernando Fernandez Mancera , netdev@vger.kernel.org Cc: horms@kernel.org, kuba@kernel.org, pabeni@redhat.com, edumazet@google.com, davem@davemloft.net, Jason Gunthorpe , Leon Romanovsky , Andrew Lunn , Tony Nguyen , Przemek Kitszel , Elad Nachman , Saeed Mahameed , Tariq Toukan , Mark Bloch , Ido Schimmel , Petr Machata , Edward Cree , Maxime Chevallier , Maxime Coquelin , Alexandre Torgue , Arend van Spriel , Miri Korenblit , Keith Busch , Jens Axboe , Christoph Hellwig , Sagi Grimberg , Chaitanya Kulkarni , Saurav Kashyap , Javed Hasan , GR-QLogic-Storage-Upstream@marvell.com, "James E.J. Bottomley" , "Martin K. Petersen" , Nilesh Javali , Manish Rangankar , Varun Prakash , Alexander Viro , Christian Brauner , Jan Kara , David Howells , Marc Dionne , Trond Myklebust , Anna Schumaker , Chuck Lever , Jeff Layton , NeilBrown , Olga Kornievskaia , Dai Ngo , Tom Talpey , Marek Lindner , Simon Wunderlich , Antonio Quartulli , Sven Eckelmann , Nikolay Aleksandrov , Pablo Neira Ayuso , Florian Westphal , Phil Sutter , Johannes Berg , Matthieu Baerts , Mat Martineau , Geliang Tang , Julian Anastasov , Aaron Conole , Eelco Chaudron , Ilya Maximets , Allison Henderson , Jamal Hadi Salim , Jiri Pirko , Marcelo Ricardo Leitner , Xin Long , "D. Wythe" , Dust Li , Sidraya Jayagond , Mahanta Jambigi , Tony Lu , Wen Gu , Jon Maloy , Tung Quang Nguyen , Steffen Klassert , Herbert Xu , Paul Moore , James Morris , "Serge E. Hallyn" , Vikas Gupta , Bhargava Marreddy , Rajashekar Hudumula , Nicolai Buchwitz , =?UTF-8?Q?Markus_Bl=C3=B6chl?= , Arnd Bergmann , Heiner Kallweit , Florian Fainelli , Krzysztof Kozlowski , Qingfang Deng , Julian Braha , Ethan Nelson-Moore , Greg Kroah-Hartman , Eric Biggers , Ard Biesheuvel , Neal Cardwell , Kuniyuki Iwashima , Willem de Bruijn , Alyssa Ross , Joel Granados , Oleg Nesterov , linux-rdma@vger.kernel.org, linux-kernel@vger.kernel.org, intel-wired-lan@lists.osuosl.org, oss-drivers@corigine.com, linux-net-drivers@amd.com, linux-stm32@st-md-mailman.stormreply.com, linux-arm-kernel@lists.infradead.org, linux-wireless@vger.kernel.org, brcm80211@lists.linux.dev, brcm80211-dev-list.pdl@broadcom.com, linux-nvme@lists.infradead.org, linux-scsi@vger.kernel.org, target-devel@vger.kernel.org, linux-fsdevel@vger.kernel.org, linux-afs@lists.infradead.org, linux-nfs@vger.kernel.org, b.a.t.m.a.n@lists.open-mesh.org, bridge@lists.linux.dev, netfilter-devel@vger.kernel.org, coreteam@netfilter.org, mptcp@lists.linux.dev, lvs-devel@vger.kernel.org, dev@openvswitch.org, rds-devel@oss.oracle.com, linux-sctp@vger.kernel.org, linux-s390@vger.kernel.org, tipc-discussion@lists.sourceforge.net, linux-security-module@vger.kernel.org, Casey Schaufler References: <20260910144914.8025-1-fmancera@suse.de> <20260910144914.8025-2-fmancera@suse.de> Content-Language: en-US From: Casey Schaufler In-Reply-To: <20260910144914.8025-2-fmancera@suse.de> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-Mailer: WebService/1.1.26525 mail.backend.jedi.jws.acl:role.jedi.acl.token.atz.jws.hermes.yahoo On 9/10/2026 7:48 AM, Fernando Fernandez Mancera wrote: > Historically, the IPv4 protocol has been linked to the core INET > subsystem. Because shared infrastructure like the TCP/UDP engine, > routing or INET hashtables live inside net/ipv4/, it has been impossible > to compile a kernel with only IPv6 support. > > This patch introduces the CONFIG_IPV4 Kconfig symbol, which is set to > 'def_bool y' for now. This does not allow to completely disable the > IPv4 stack yet but it lays the necessary build-system work for that > goal. > > In addition, multiple subsystems Kconfig symbols across networking > features like tunnels, drivers and filesystems have been adjusted to > depend on IPv4. Keep on mind that follow-up work is required to convert > the Kconfig symbol to bool and remove the dependency on IPv4 where it > makes sense. > > Signed-off-by: Fernando Fernandez Mancera > --- > ... > security/smack/Kconfig | 1 + > 54 files changed, 126 insertions(+), 66 deletions(-) > ... > diff --git a/security/smack/Kconfig b/security/smack/Kconfig > index 5a8dfad469c3..b4e6d0168bd1 100644 > --- a/security/smack/Kconfig > +++ b/security/smack/Kconfig > @@ -3,6 +3,7 @@ config SECURITY_SMACK > bool "Simplified Mandatory Access Control Kernel Support" > depends on NET > depends on INET > + depends on IPV4 > depends on SECURITY > select NETLABEL > select SECURITY_NETWORK Why would this make sense? You're introducing the capability to use IP6 by itself, which is admirable, but you're disallowing that configuration with the Smack LSM. It appears that you've done a mechanical lookup in the Kconfig files and applied the minimal change to make the kernel compile, which probably works for most cases. It does not work for Smack. Unless there's a strong argument that Smack with IPv6 and without IPv4 is and always will be a pointless configuration you have my NAK.