[nf-next PATCH 0/3] netfilter: nf_tables: Report found devices when creating a netdev hook

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Previously, NEWDEV/DELDEV notifications were emitted for new/renamed
devices added to a chain or flowtable only. For user space to fully
comprehend which interfaces a hook binds to, these notifications have to
be sent for matching devices at hook creation time, too.

This series extends the notify list to support messages for varying
groups so it may be reused by the NFNLGRP_NFT_DEV messages (patch 1),
adjusts the device_notify routines to support enqueueing the message
instead of sending it right away (patch 2) and finally adds extra notify
calls to nf_tables_commit() (patch 3).

Phil Sutter (3):
  netfilter: nf_tables: commit_notify: Support varying groups
  netfilter: nf_tables: Support enqueueing device notifications
  netfilter: nf_tables: Extend chain/flowtable notifications

 include/net/netfilter/nf_tables.h |   3 +-
 net/netfilter/nf_tables_api.c     | 160 ++++++++++++++++++++++++++----
 net/netfilter/nft_chain_filter.c  |   2 +-
 3 files changed, 144 insertions(+), 21 deletions(-)

-- 
2.49.0





[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux