From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 071482DA75C for ; Mon, 12 Jan 2026 12:55:16 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=170.10.129.124 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1768222518; cv=none; b=HJsPAC/N6UIa6R1NFFlnw2OYQHeMWrkC28e5kwDztbhx61hYk9SYSscu8/sMn4bI7bKQ5bTCWLpXq37kuvhKjR+tLMPDVeqWv0M8S0WUL3JBGMYRdtcZE76ioUJ3A8kC1bOCWWu3KyWweIE66r61piUFkmsESKol8t6zAgFDEa8= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1768222518; c=relaxed/simple; bh=ArVVBiqIBetgJi+p5f+cmJSVHQwk79p7Tqq1GTf/FIY=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=j3Qhdk5gK+Zf68V8xivue8GleDrmQthLT0u4XSyoptDGCYZBZNPO3OjkGITpbN3vy25hhjSAhw1jayRQiZqfZKjd1aUQgKuK4FjzD076EH/R3PxUvEBCgNycziML1NqASkCZUQDhNo/NRvihpvr+qqSrY2M2KueBYFuWwuI/VNk= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com; spf=pass smtp.mailfrom=redhat.com; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b=PgDov8M8; dkim=pass (2048-bit key) header.d=redhat.com header.i=@redhat.com header.b=rCxp4Ryz; arc=none smtp.client-ip=170.10.129.124 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=redhat.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b="PgDov8M8"; dkim=pass (2048-bit key) header.d=redhat.com header.i=@redhat.com header.b="rCxp4Ryz" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1768222515; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=iKF0BzHe4DoMZWSEsankET3G7Dd2Xauwml8GRRGytpc=; b=PgDov8M8o/VevwrglTn4n0NL/Cx2G3RbuoC98w9pnIXu6dN3knLqRmEhDMSaSVV7Idg4He dR4l6h6bV1jLCq6xfUIx5npXeIYsCYcBplxXETSxf57i0q/ZqCi9b0xK3jq/1G3AnslSMl JnnJezdsFzm4FIahK0oQRNlTzMtintg= Received: from mail-ej1-f70.google.com (mail-ej1-f70.google.com [209.85.218.70]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-645-mWLBlfRtOLyBvN7DbY6iMQ-1; Mon, 12 Jan 2026 07:54:42 -0500 X-MC-Unique: mWLBlfRtOLyBvN7DbY6iMQ-1 X-Mimecast-MFC-AGG-ID: mWLBlfRtOLyBvN7DbY6iMQ_1768222481 Received: by mail-ej1-f70.google.com with SMTP id a640c23a62f3a-b8709d4ff20so137518266b.0 for ; Mon, 12 Jan 2026 04:54:41 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=google; t=1768222481; x=1768827281; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to; bh=iKF0BzHe4DoMZWSEsankET3G7Dd2Xauwml8GRRGytpc=; b=rCxp4RyzYa1uRlHfi4XCk6oEMRJJXQ9SgGaYEBF/YfmuGPtkoZrDAfaxomS6GCz6Za QiN9IH2twxYg+43Ig2uUrdLwb3VuNarUO8ZDZfruxNxxxT8n3txWJS7ZxBvGpxY1Marm w2N0QCCS58hX+iD7Q3wlj6wTnNiTQAg30DJFY/HwEaUR+1w8K9zQfHZNLP3rST+puygG S5TKaTzGsSxcicY34XgrKC/7iSg5UcrA5ppX9ojDzluwSo9+pCpfJenj0wgiCn7A9nSR 2/mgXe3TuUFIJlmkjqC6oS82ir5qMn0wr4ssq8/HLwbsFVwSS/YtEnjtvtr+Ga6DCD1w JjOQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1768222481; x=1768827281; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=iKF0BzHe4DoMZWSEsankET3G7Dd2Xauwml8GRRGytpc=; b=FKeDttCBAJw/Zri8FybIzymAFSXVun6Vf3c0GnhwL5bP4+kDJxpznce9gchZBnu0IA iulvNVkIuZspnw84vQwPuGmzAnvPw/jl+Pq0rDWdiLf/8V2dJ3CyditA9p4diB04QOYd q1J6Knrns1LE90SzK8SCIqhLy2WK5XCEYAzScQj3d4PANyS9rqWxEtlGCT6Zlt3hSqt3 As9RaVv07uoX2nDQ5x9OSuFgi+1k0642xMzdzNRj2BAUd8OLtP8b5zql8dPr5McDgafd z9VV0uxn86nEyDsjYWSxi+eqU1T6T5lw5wBStXq6B3g7Fn/avo1PbpC2rkiJYVORDwB9 zjOQ== X-Forwarded-Encrypted: i=1; AJvYcCUCyptXIrYBJoeQBVyVMnIKrYKDGT99tFUFcIMMaNqwpTbuBFTxLlMIagEHo2APq+ZA0yH4qcON2MjCcc8=@vger.kernel.org X-Gm-Message-State: AOJu0YwkAFmtkQ7VHGZUbkSPUvpGZ+64atryjOMpJujx9IOp8nnz6CWO zEshsGdO3qcoAsvq6B4YsltXO7DhdQ6s6QK28ERSlzE6PcPNMdHxKonlAkLbsx+TdtfqDjsxhTD wf+YlsEaTxcuthaLxcFotW7rmmMDnt+i3SW7LC1VxomaoM5D5FrYR6Z9+HdQfTR7T/w== X-Gm-Gg: AY/fxX6KKs3SdTSORlNN91BoeM1g9OctmoU/TEby26F0j/te9/jVe2d4YoNpCf7zXc0 IKTr4OGaEopPNT1I3q36rfqWfHXDSkh6a4SL3HhmVjEdu/qcoKtPViZfepK/uG32UUx4vpKoB4z NFi+4L3axItMclRYuYOt6+O7S5cVb3X98r35/e3NmxmQgLGKVaoL33en73OOc9hFPsjSJ4BH0t1 5wE2+Cqn3nMwSl0YyOP3IcR5vD5qdy4t/4ZRc104jQUvdwhAbq2q3+dm8N3LwF09VxYPMBEA1mO 4XefYMr3l2ChNIsL+UKn1I1bdjZgvoM37hGDrGSoZs2r0ySDchALSMzLpgbTuy8GDGQjzkS9h2Y +9riqDOTul1OFRCoPX9qSeLwcHiLjc74yMNeTHVOEkISPHiTquvhx+wWmjuo= X-Received: by 2002:a17:907:a4a:b0:b83:8f35:773b with SMTP id a640c23a62f3a-b844501e49emr1772455466b.54.1768222480766; Mon, 12 Jan 2026 04:54:40 -0800 (PST) X-Google-Smtp-Source: AGHT+IGSZz6AlBAsyDbYMyXJssyt5r14tT5j/dhOjPD0uwwtT32eYJd5F4wjSbE4zxf083DcjrlpEg== X-Received: by 2002:a17:907:a4a:b0:b83:8f35:773b with SMTP id a640c23a62f3a-b844501e49emr1772452766b.54.1768222480270; Mon, 12 Jan 2026 04:54:40 -0800 (PST) Received: from lbulwahn-thinkpadx1carbongen12.rmtde.csb ([2a02:810d:7e01:ef00:ff56:9b88:c93b:ed43]) by smtp.gmail.com with ESMTPSA id a640c23a62f3a-b8706c2604bsm497062466b.16.2026.01.12.04.54.38 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 12 Jan 2026 04:54:39 -0800 (PST) From: Lukas Bulwahn X-Google-Original-From: Lukas Bulwahn To: "David S . Miller" , Eric Dumazet , Jakub Kicinski , Paolo Abeni , Simon Horman , Pablo Neira Ayuso , Florian Westphal , Phil Sutter , David Ahern , netdev@vger.kernel.org, netfilter-devel@vger.kernel.org, coreteam@netfilter.org Cc: Geert Uytterhoeven , Paul Walmsley , Palmer Dabbelt , Albert Ou , Alexandre Ghiti , Heiko Carstens , Vasily Gorbik , Alexander Gordeev , Christian Borntraeger , Sven Schnelle , linux-riscv@lists.infradead.org, linux-m68k@lists.linux-m68k.org, linux-s390@vger.kernel.org, kernel-janitors@vger.kernel.org, linux-kernel@vger.kernel.org, Lukas Bulwahn Subject: [RFC PATCH 0/5] net: make config options NF_LOG_{ARP,IPV4,IPV6} transitional Date: Mon, 12 Jan 2026 13:54:26 +0100 Message-ID: <20260112125432.61218-1-lukas.bulwahn@redhat.com> X-Mailer: git-send-email 2.52.0 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Hi, This RFC patch series makes the config options NF_LOG_{ARP,IPV4,IPV6} transitional. Recently, Kees Cook added a feature to kconfig to assist transitioning deprecated config options. Here is a first RFC patch to apply this feature for NF_LOG_{ARP,IPV4,IPV6}. The plan is to mark all deprecated config options in net transitional, and update the kernel configurations in the kernel tree to not use those transitional config options. Then we leave these transitional config options for a year or two to allow users that only update from one LTS to the next to see that these config options are deprecated. After such a grace period, we can finally drop these transitional config options. This patch series is the manifestation of that plan for the three deprecated options NF_LOG_{ARP,IPV4,IPV6}. If there is general agreement that this is how deprecated config options are to be handled, then please apply the patches 1 and 2 to the net-next tree. Note that for the time being, as there is no dedicated kernel-wide Kconfig file for collecting transitional config options right now, so simply adding them at the end of the net/Kconfig file seems the best choice for now. The patches 3, 4 and 5 are added here to understand the complete treewide change to transition the deprecated config options; I expect the patches 3, 4 and 5 to be applied by the corresponding arch maintainers, though. Note that all patches in this series can be applied independently from each other without causing any regression, i.e., if any patch 2 to 5 is applied without patch 1, the resulting kernel configurations still enable the same functionality as before as well as with patch 1 applied. Once the general approach and patches are accepted, I plan to send some further patch series to transition more net config options. My current investigation identified that these further config options in net can be transitioned: IP_NF_MATCH_ECN -> NETFILTER_XT_MATCH_ECN IP_NF_MATCH_TTL -> NETFILTER_XT_MATCH_HL IP_NF_TARGET_MASQUERADE -> NETFILTER_XT_TARGET_MASQUERADE IP_NF_TARGET_NETMAP -> NETFILTER_XT_TARGET_NETMAP IP_NF_TARGET_REDIRECT -> NETFILTER_XT_TARGET_REDIRECT IP_NF_TARGET_TTL -> NETFILTER_XT_TARGET_HL NETFILTER_XT_TARGET_CONNMARK -> NETFILTER_XT_CONNMARK NETFILTER_XT_TARGET_MARK -> NETFILTER_XT_MARK Lukas Lukas Bulwahn (5): net: make configs NF_LOG_{ARP,IPV4,IPV6} transitional selftests: net: replace deprecated NF_LOG configs by NF_LOG_SYSLOG m68k: defconfig: replace deprecated NF_LOG configs by NF_LOG_SYSLOG riscv: defconfig: replace deprecated NF_LOG configs by NF_LOG_SYSLOG s390/configs: replace deprecated NF_LOG configs by NF_LOG_SYSLOG arch/m68k/configs/amiga_defconfig | 3 +-- arch/m68k/configs/apollo_defconfig | 3 +-- arch/m68k/configs/atari_defconfig | 3 +-- arch/m68k/configs/bvme6000_defconfig | 3 +-- arch/m68k/configs/hp300_defconfig | 3 +-- arch/m68k/configs/mac_defconfig | 3 +-- arch/m68k/configs/multi_defconfig | 3 +-- arch/m68k/configs/mvme147_defconfig | 3 +-- arch/m68k/configs/mvme16x_defconfig | 3 +-- arch/m68k/configs/q40_defconfig | 3 +-- arch/m68k/configs/sun3_defconfig | 3 +-- arch/m68k/configs/sun3x_defconfig | 3 +-- arch/riscv/configs/defconfig | 4 +--- arch/s390/configs/debug_defconfig | 2 +- arch/s390/configs/defconfig | 2 +- net/Kconfig | 21 ++++++++++++++++++++ net/ipv4/netfilter/Kconfig | 16 --------------- net/ipv6/netfilter/Kconfig | 8 -------- net/netfilter/Kconfig | 1 + tools/testing/selftests/net/netfilter/config | 3 +-- 20 files changed, 38 insertions(+), 55 deletions(-) -- 2.52.0