NFT_SET_EVAL is signalling the kernel that this sets can be updated from the evaluation path, even if there are no expressions attached to the element. Otherwise, set updates with no expressions fail. Update description to describe the right semantics.
Showing the changes to include/uapi/linux/netfilter (1 of 2 files). Show all
Unified · Split
| @@ -266,7 +266,7 @@ enum nft_rule_compat_attributes { · 265 unmodified lines | ||
| 266 | 266 | * @NFT_SET_INTERVAL: set contains intervals |
| 267 | 267 | * @NFT_SET_MAP: set is used as a dictionary |
| 268 | 268 | * @NFT_SET_TIMEOUT: set uses timeouts |
| 269 | − * @NFT_SET_EVAL: set contains expressions for evaluation | |
| 269 | + * @NFT_SET_EVAL: set can be updated from the evaluation path | |
| 270 | 270 | * @NFT_SET_OBJECT: set contains stateful objects |
| 271 | 271 | */ |
| 272 | 272 | enum nft_set_flags { |