netfilter: nf_tables: add NFT_CHAIN_BINDING
authorPablo Neira Ayuso <pablo@netfilter.org>
Tue, 30 Jun 2020 17:21:36 +0000 (19:21 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Fri, 3 Jul 2020 23:22:14 +0000 (01:22 +0200)
commitd0e2c7de92c7f2b3d355ad76b0bb9fc43d1beb87
treeaeb58859a40e1b8478a275c2fd534b5bf56cad10
parent04b7db414490ea9254d0c1d8930ea9571f8ce9f0
netfilter: nf_tables: add NFT_CHAIN_BINDING

This new chain flag specifies that:

* the kernel dynamically allocates the chain name, if no chain name
  is specified.

* If the immediate expression that refers to this chain is removed,
  then this bound chain (and its content) is destroyed.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/net/netfilter/nf_tables.h
include/uapi/linux/netfilter/nf_tables.h
net/netfilter/nf_tables_api.c
net/netfilter/nft_immediate.c