History

netfilter: nf_tables: add stateful object reference expression

This new expression allows us to refer to existing stateful objects from rules.

Pablo Neira Ayuso committed 9 years ago

Commit c97d22e1 parent 173705d4 files · +133 −0Browse files

Showing the changes to include/uapi/linux (1 of 4 files). Show all

Unified · Split

include/uapi/linux/netfilter/nf_tables.h+14−0
@@ -1137,6 +1137,20 @@ enum nft_fwd_attributes { · 1136 unmodified lines
11371137 };
11381138 #define NFTA_FWD_MAX (__NFTA_FWD_MAX - 1)
11391139
1140+/**
1141+ * enum nft_objref_attributes - nf_tables stateful object expression netlink attributes
1142+ *
1143+ * @NFTA_OBJREF_IMM_TYPE: object type for immediate reference (NLA_U32: nft_register)
1144+ * @NFTA_OBJREF_IMM_NAME: object name for immediate reference (NLA_STRING)
1145+ */
1146+enum nft_objref_attributes {
1147+ NFTA_OBJREF_UNSPEC,
1148+ NFTA_OBJREF_IMM_TYPE,
1149+ NFTA_OBJREF_IMM_NAME,
1150+ __NFTA_OBJREF_MAX
1151+};
1152+#define NFTA_OBJREF_MAX (__NFTA_OBJREF_MAX - 1)
1153+
11401154 /**
11411155 * enum nft_gen_attributes - nf_tables ruleset generation attributes
11421156 *