History

netfilter: nf_tables: reintroduce the NFT_SET_CONCAT flag

Stefano originally proposed to introduce this flag, users hit EOPNOTSUPP in new binaries with old kernels when defining a set with ranges in a concatenation.

Pablo Neira Ayuso committed 6 years ago

Commit ef516e81 parent d9583cd2 files · +3 −1Browse files

Showing the changes to include/uapi/linux (1 of 2 files). Show all

Unified · Split

include/uapi/linux/netfilter/nf_tables.h+2−0
@@ -276,6 +276,7 @@ enum nft_rule_compat_attributes { · 275 unmodified lines
276 * @NFT_SET_TIMEOUT: set uses timeouts276 * @NFT_SET_TIMEOUT: set uses timeouts
277 * @NFT_SET_EVAL: set can be updated from the evaluation path277 * @NFT_SET_EVAL: set can be updated from the evaluation path
278 * @NFT_SET_OBJECT: set contains stateful objects278 * @NFT_SET_OBJECT: set contains stateful objects
279 * @NFT_SET_CONCAT: set contains a concatenation
279 */280 */
280enum nft_set_flags {281enum nft_set_flags {
281 NFT_SET_ANONYMOUS = 0x1,282 NFT_SET_ANONYMOUS = 0x1,
@@ -285,6 +286,7 @@ enum nft_set_flags { · 3 unmodified lines
285 NFT_SET_TIMEOUT = 0x10,286 NFT_SET_TIMEOUT = 0x10,
286 NFT_SET_EVAL = 0x20,287 NFT_SET_EVAL = 0x20,
287 NFT_SET_OBJECT = 0x40,288 NFT_SET_OBJECT = 0x40,
289 NFT_SET_CONCAT = 0x80,
288};290};
289 291
290/**292/**