History

netfilter: nf_tables: reintroduce the NFT_SET_CONCAT flag

Stefano originally proposed to introduce this flag, users hit EOPNOTSUPP in new binaries with old kernels when defining a set with ranges in a concatenation.

Pablo Neira Ayuso committed 6 years ago

Commit ef516e81 parent d9583cd2 files · +3 −1Browse files

Showing the changes to include/uapi/linux (1 of 2 files). Show all

Unified · Split

include/uapi/linux/netfilter/nf_tables.h+2−0
@@ -276,6 +276,7 @@ enum nft_rule_compat_attributes { · 275 unmodified lines
276276 * @NFT_SET_TIMEOUT: set uses timeouts
277277 * @NFT_SET_EVAL: set can be updated from the evaluation path
278278 * @NFT_SET_OBJECT: set contains stateful objects
279+ * @NFT_SET_CONCAT: set contains a concatenation
279280 */
280281 enum nft_set_flags {
281282 NFT_SET_ANONYMOUS = 0x1,
@@ -285,6 +286,7 @@ enum nft_set_flags { · 3 unmodified lines
285286 NFT_SET_TIMEOUT = 0x10,
286287 NFT_SET_EVAL = 0x20,
287288 NFT_SET_OBJECT = 0x40,
289+ NFT_SET_CONCAT = 0x80,
288290 };
289291
290292 /**