History

netfilter: meta: secpath support

replacement for iptables "-m policy --dir in --policy {ipsec,none}".

Florian Westphal committed 8 years ago

Commit f6931f51 parent b3a61252 files · +45 −0Browse files

Showing the changes to include/uapi/linux (1 of 2 files). Show all

Unified · Split

include/uapi/linux/netfilter/nf_tables.h+2−0
@@ -777,6 +777,7 @@ enum nft_exthdr_attributes { · 776 unmodified lines
777777 * @NFT_META_OIFGROUP: packet output interface group
778778 * @NFT_META_CGROUP: socket control group (skb->sk->sk_classid)
779779 * @NFT_META_PRANDOM: a 32bit pseudo-random number
780+ * @NFT_META_SECPATH: boolean, secpath_exists (!!skb->sp)
780781 */
781782 enum nft_meta_keys {
782783 NFT_META_LEN,
@@ -804,6 +805,7 @@ enum nft_meta_keys { · 21 unmodified lines
804805 NFT_META_OIFGROUP,
805806 NFT_META_CGROUP,
806807 NFT_META_PRANDOM,
808+ NFT_META_SECPATH,
807809 };
808810
809811 /**