History

netfilter: nf_tables: allocate handle and delete objects via handle

This patch allows deletion of objects via unique handle which can be listed via '-a' option.

Harsha Sharma committed 8 years ago

Commit 3ecbfd61 parent cc2d5863 files · +153 −14Browse files

Showing the changes to include/uapi/linux (1 of 3 files). Show all

Unified · Split

include/uapi/linux/netfilter/nf_tables.h+10−0
@@ -174,6 +174,8 @@ enum nft_table_attributes { · 173 unmodified lines
174174 NFTA_TABLE_NAME,
175175 NFTA_TABLE_FLAGS,
176176 NFTA_TABLE_USE,
177+ NFTA_TABLE_HANDLE,
178+ NFTA_TABLE_PAD,
177179 __NFTA_TABLE_MAX
178180 };
179181 #define NFTA_TABLE_MAX (__NFTA_TABLE_MAX - 1)
@@ -317,6 +319,7 @@ enum nft_set_desc_attributes { · 137 unmodified lines
317319 * @NFTA_SET_GC_INTERVAL: garbage collection interval (NLA_U32)
318320 * @NFTA_SET_USERDATA: user data (NLA_BINARY)
319321 * @NFTA_SET_OBJ_TYPE: stateful object type (NLA_U32: NFT_OBJECT_*)
322+ * @NFTA_SET_HANDLE: set handle (NLA_U64)
320323 */
321324 enum nft_set_attributes {
322325 NFTA_SET_UNSPEC,
@@ -335,6 +338,7 @@ enum nft_set_attributes { · 12 unmodified lines
335338 NFTA_SET_USERDATA,
336339 NFTA_SET_PAD,
337340 NFTA_SET_OBJ_TYPE,
341+ NFTA_SET_HANDLE,
338342 __NFTA_SET_MAX
339343 };
340344 #define NFTA_SET_MAX (__NFTA_SET_MAX - 1)
@@ -1314,6 +1318,7 @@ enum nft_ct_helper_attributes { · 973 unmodified lines
13141318 * @NFTA_OBJ_TYPE: stateful object type (NLA_U32)
13151319 * @NFTA_OBJ_DATA: stateful object data (NLA_NESTED)
13161320 * @NFTA_OBJ_USE: number of references to this expression (NLA_U32)
1321+ * @NFTA_OBJ_HANDLE: object handle (NLA_U64)
13171322 */
13181323 enum nft_object_attributes {
13191324 NFTA_OBJ_UNSPEC,
@@ -1322,6 +1327,8 @@ enum nft_object_attributes { · 2 unmodified lines
13221327 NFTA_OBJ_TYPE,
13231328 NFTA_OBJ_DATA,
13241329 NFTA_OBJ_USE,
1330+ NFTA_OBJ_HANDLE,
1331+ NFTA_OBJ_PAD,
13251332 __NFTA_OBJ_MAX
13261333 };
13271334 #define NFTA_OBJ_MAX (__NFTA_OBJ_MAX - 1)
@@ -1333,6 +1340,7 @@ enum nft_object_attributes { · 5 unmodified lines
13331340 * @NFTA_FLOWTABLE_NAME: name of this flow table (NLA_STRING)
13341341 * @NFTA_FLOWTABLE_HOOK: netfilter hook configuration(NLA_U32)
13351342 * @NFTA_FLOWTABLE_USE: number of references to this flow table (NLA_U32)
1343+ * @NFTA_FLOWTABLE_HANDLE: object handle (NLA_U64)
13361344 */
13371345 enum nft_flowtable_attributes {
13381346 NFTA_FLOWTABLE_UNSPEC,
@@ -1340,6 +1348,8 @@ enum nft_flowtable_attributes { · 1 unmodified line
13401348 NFTA_FLOWTABLE_NAME,
13411349 NFTA_FLOWTABLE_HOOK,
13421350 NFTA_FLOWTABLE_USE,
1351+ NFTA_FLOWTABLE_HANDLE,
1352+ NFTA_FLOWTABLE_PAD,
13431353 __NFTA_FLOWTABLE_MAX
13441354 };
13451355 #define NFTA_FLOWTABLE_MAX (__NFTA_FLOWTABLE_MAX - 1)