scaffold: aports overlay, build script, CI workflow, README
Kernel aport forked from pmaports 7.1.2-r0, repointed at milos-linux combined-stable with the tested FP6 config (+EFI_ZBOOT for packaging); imsd + nftables aports from the pending pmaports submission. build.sh carries TODO(validate) markers - not yet run end-to-end. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
commit
de2e819a16
26 changed files with 9095 additions and 0 deletions
15
aports/main/postmarketos-config-nftables/rules/01_imsd.nft
Normal file
15
aports/main/postmarketos-config-nftables/rules/01_imsd.nft
Normal file
|
|
@ -0,0 +1,15 @@
|
|||
#!/usr/sbin/nft -f
|
||||
|
||||
table inet filter {
|
||||
chain input {
|
||||
|
||||
# imsd's IPsec-protected SIP ports on the IMS PDN. Ordered before
|
||||
# 01_wwan.nft's qmapmux drop: the ESP-decapsulated inbound flows
|
||||
# arrive on qmapmux* and would be dropped there. The comment is
|
||||
# load-bearing — imsd's ims-pdn-up.sh checks for it and skips its
|
||||
# runtime rule insertion when this rule is present.
|
||||
iifname "qmapmux*" tcp dport 45061-45062 accept comment "imsd-protected-ports"
|
||||
iifname "qmapmux*" udp dport 45061-45062 accept comment "imsd-protected-ports"
|
||||
|
||||
}
|
||||
}
|
||||
Loading…
Reference in a new issue