netfilter: nf_tables: Add audit support to log statement

This extends log statement to support the behaviour achieved with AUDIT target in iptables. Audit logging is enabled via a pseudo log level 8. In this case any other settings like log prefix are ignored since audit log format is fixed.

Phil Sutter committed 8 years ago

Commit 1a893b41 parent 554ced02 files · +96 −1Browse files

Showing the changes to include/uapi/linux (1 of 2 files). Show all

Unified · Split

include/uapi/linux/netfilter/nf_tables.h+5−0

@@ -1080,6 +1080,11 @@ enum nft_log_attributes { · 1079 unmodified lines
1080	1080	};
1081	1081	#define NFTA_LOG_MAX (__NFTA_LOG_MAX - 1)
1082	1082
	1083	+/**
	1084	+ * LOGLEVEL_AUDIT - a pseudo log level enabling audit logging
	1085	+ */
	1086	+#define LOGLEVEL_AUDIT 8
	1087	+
1083	1088	/**
1084	1089	* enum nft_queue_attributes - nf_tables queue expression netlink attributes
1085	1090	*