History

netfilter: nf_tables: Add audit support to log statement

This extends log statement to support the behaviour achieved with AUDIT target in iptables. Audit logging is enabled via a pseudo log level 8. In this case any other settings like log prefix are ignored since audit log format is fixed.

Phil Sutter committed 8 years ago

Commit 1a893b41 parent 554ced02 files · +96 −1Browse files

Showing the changes to include/uapi/linux (1 of 2 files). Show all

Unified · Split

include/uapi/linux/netfilter/nf_tables.h+5−0
@@ -1080,6 +1080,11 @@ enum nft_log_attributes { · 1079 unmodified lines
1080};1080};
1081#define NFTA_LOG_MAX (__NFTA_LOG_MAX - 1)1081#define NFTA_LOG_MAX (__NFTA_LOG_MAX - 1)
1082 1082
1083/**
1084 * LOGLEVEL_AUDIT - a pseudo log level enabling audit logging
1085 */
1086#define LOGLEVEL_AUDIT 8
1087
1083/**1088/**
1084 * enum nft_queue_attributes - nf_tables queue expression netlink attributes1089 * enum nft_queue_attributes - nf_tables queue expression netlink attributes
1085 *1090 *