History

netfilter: nf_tables: allow to bind table to net_device

This patch adds the internal NFT_AF_NEEDS_DEV flag to indicate that you must attach this table to a net_device. This change is required by the follow up patch that introduces the new netdev table.

Pablo Neira Ayuso committed 11 years ago

Commit ebddf1a1 parent 529985d3 files · +51 −5Browse files

Showing the changes to include/uapi (1 of 3 files). Show all

Unified · Split

include/uapi/linux/netfilter/nf_tables.h+2−0
@@ -146,12 +146,14 @@ enum nft_table_flags { · 145 unmodified lines
146 * @NFTA_TABLE_NAME: name of the table (NLA_STRING)146 * @NFTA_TABLE_NAME: name of the table (NLA_STRING)
147 * @NFTA_TABLE_FLAGS: bitmask of enum nft_table_flags (NLA_U32)147 * @NFTA_TABLE_FLAGS: bitmask of enum nft_table_flags (NLA_U32)
148 * @NFTA_TABLE_USE: number of chains in this table (NLA_U32)148 * @NFTA_TABLE_USE: number of chains in this table (NLA_U32)
149 * @NFTA_TABLE_DEV: net device name (NLA_STRING)
149 */150 */
150enum nft_table_attributes {151enum nft_table_attributes {
151 NFTA_TABLE_UNSPEC,152 NFTA_TABLE_UNSPEC,
152 NFTA_TABLE_NAME,153 NFTA_TABLE_NAME,
153 NFTA_TABLE_FLAGS,154 NFTA_TABLE_FLAGS,
154 NFTA_TABLE_USE,155 NFTA_TABLE_USE,
156 NFTA_TABLE_DEV,
155 __NFTA_TABLE_MAX157 __NFTA_TABLE_MAX
156};158};
157#define NFTA_TABLE_MAX (__NFTA_TABLE_MAX - 1)159#define NFTA_TABLE_MAX (__NFTA_TABLE_MAX - 1)