projects / platform / kernel / linux-rpi.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 151d799) | patch
netfilter: nf_tables: add flag to indicate set contains expressions
authorPatrick McHardy <kaber@trash.net>
Sat, 11 Apr 2015 09:46:41 +0000 (10:46 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 13 Apr 2015 18:12:32 +0000 (20:12 +0200)
commit7c6c6e95a12e46f499749bdd496e53d03950f377
tree40afe68a6cd068af4e5102ec4989e57dbfe3e762tree | snapshot
parent151d799a61da1b6f6b7e5116fb776177917bbe9acommit | diff
netfilter: nf_tables: add flag to indicate set contains expressions

Add a set flag to indicate that the set is used as a state table and
contains expressions for evaluation. This operation is mutually
exclusive with the mapping operation, so sets specifying both are
rejected. The lookup expression also rejects binding to state tables
since it only deals with loopup and map operations.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/uapi/linux/netfilter/nf_tables.h diff | blob | history
net/netfilter/nf_tables_api.c diff | blob | history
net/netfilter/nft_lookup.c diff | blob | history
Domain: System / Kernel;