diff options
| author | Shea Levy <shea@shealevy.com> | 2017-02-06 16:43:23 -0500 |
|---|---|---|
| committer | Shea Levy <shea@shealevy.com> | 2017-02-06 16:43:23 -0500 |
| commit | 714fdb425a90630517056552d77fa4ccb8fadae7 (patch) | |
| tree | 534998e005c2bc7d24edb237052151e38e1946eb /nixos/modules/services/networking/firewall.nix | |
| parent | 2ac2bd187eb9f76252f5dfea80c78549c64ed3b8 (diff) | |
| download | nixpkgs-714fdb425a90630517056552d77fa4ccb8fadae7.tar nixpkgs-714fdb425a90630517056552d77fa4ccb8fadae7.tar.gz nixpkgs-714fdb425a90630517056552d77fa4ccb8fadae7.tar.bz2 nixpkgs-714fdb425a90630517056552d77fa4ccb8fadae7.tar.lz nixpkgs-714fdb425a90630517056552d77fa4ccb8fadae7.tar.xz nixpkgs-714fdb425a90630517056552d77fa4ccb8fadae7.tar.zst nixpkgs-714fdb425a90630517056552d77fa4ccb8fadae7.zip | |
firewall: Fix check for rpfilter on manual-config kernels
Diffstat (limited to 'nixos/modules/services/networking/firewall.nix')
| -rw-r--r-- | nixos/modules/services/networking/firewall.nix | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/nixos/modules/services/networking/firewall.nix b/nixos/modules/services/networking/firewall.nix index 34b731ad35c..243cd04c96c 100644 --- a/nixos/modules/services/networking/firewall.nix +++ b/nixos/modules/services/networking/firewall.nix @@ -38,9 +38,9 @@ let cfg = config.networking.firewall; - kernelPackages = config.boot.kernelPackages; + inherit (config.boot.kernelPackages) kernel; - kernelHasRPFilter = kernelPackages.kernel.features.netfilterRPFilter or false; + kernelHasRPFilter = ((kernel.config.isEnabled or (x: false)) "IP_NF_MATCH_RPFILTER") || (kernel.features.netfilterRPFilter or false); helpers = '' |