diff options
author | David S. Miller <davem@davemloft.net> | 2021-10-02 13:55:02 +0100 |
---|---|---|
committer | David S. Miller <davem@davemloft.net> | 2021-10-02 13:55:02 +0100 |
commit | dade7f9d819d89ba2da5f72a07cb4b91a1e1f74a (patch) | |
tree | 54ab285e1a716c386c7e71b94ef03f7fd6a0965b /net/dccp/minisocks.c | |
parent | 5cfe5109a1d7fd9686d5c695827216788bf0b1ec (diff) | |
parent | 6fb721cf781808ee2ca5e737fb0592cc68de3381 (diff) |
Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf
Pablo Neira Ayuso says:
====================
Netfilter fixes for net (v2)
The following patchset contains Netfilter fixes for net:
1) Move back the defrag users fields to the global netns_nf area.
Kernel fails to boot if conntrack is builtin and kernel is booted
with: nf_conntrack.enable_hooks=1. From Florian Westphal.
2) Rule event notification is missing relevant context such as
the position handle and the NLM_F_APPEND flag.
3) Rule replacement is expanded to add + delete using the existing
rule handle, reverse order of this operation so it makes sense
from rule notification standpoint.
4) Propagate to userspace the NLM_F_CREATE and NLM_F_EXCL flags
from the rule notification path.
Patches #2, #3 and #4 are used by 'nft monitor' and 'iptables-monitor'
userspace utilities which are not correctly representing the following
operations through netlink notifications:
- rule insertions
- rule addition/insertion from position handle
- create table/chain/set/map/flowtable/...
====================
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/dccp/minisocks.c')
0 files changed, 0 insertions, 0 deletions