History

netfilter: meta: secpath support

replacement for iptables "-m policy --dir in --policy {ipsec,none}".

Florian Westphal committed 8 years ago

Commit f6931f51 parent b3a61252 files · +45 −0Browse files

Showing the changes to include/uapi/linux (1 of 2 files). Show all

Unified · Split

include/uapi/linux/netfilter/nf_tables.h+2−0
@@ -777,6 +777,7 @@ enum nft_exthdr_attributes { · 776 unmodified lines
777 * @NFT_META_OIFGROUP: packet output interface group777 * @NFT_META_OIFGROUP: packet output interface group
778 * @NFT_META_CGROUP: socket control group (skb->sk->sk_classid)778 * @NFT_META_CGROUP: socket control group (skb->sk->sk_classid)
779 * @NFT_META_PRANDOM: a 32bit pseudo-random number779 * @NFT_META_PRANDOM: a 32bit pseudo-random number
780 * @NFT_META_SECPATH: boolean, secpath_exists (!!skb->sp)
780 */781 */
781enum nft_meta_keys {782enum nft_meta_keys {
782 NFT_META_LEN,783 NFT_META_LEN,
@@ -804,6 +805,7 @@ enum nft_meta_keys { · 21 unmodified lines
804 NFT_META_OIFGROUP,805 NFT_META_OIFGROUP,
805 NFT_META_CGROUP,806 NFT_META_CGROUP,
806 NFT_META_PRANDOM,807 NFT_META_PRANDOM,
808 NFT_META_SECPATH,
807};809};
808 810
809/**811/**