History

netfilter: nf_tables: add NFT_CHAIN_BINDING

This new chain flag specifies that: * the kernel dynamically allocates the chain name, if no chain name is specified. * If the immediate expression that refers to this chain is removed, then this bound chain (and its content) is destroyed.

Pablo Neira Ayuso committed 6 years ago

Commit d0e2c7d1 parent 04b7db44 files · +138 −13Browse files

Showing the changes to include/uapi/linux (1 of 4 files). Show all

Unified · Split

include/uapi/linux/netfilter/nf_tables.h+1−0
@@ -187,6 +187,7 @@ enum nft_table_attributes { · 186 unmodified lines
187187 enum nft_chain_flags {
188188 NFT_CHAIN_BASE = (1 << 0),
189189 NFT_CHAIN_HW_OFFLOAD = (1 << 1),
190+ NFT_CHAIN_BINDING = (1 << 2),
190191 };
191192
192193 /**