diff options
| author | Patrick McHardy | 2014-02-05 16:03:37 +0100 |
|---|---|---|
| committer | Pablo Neira Ayuso | 2014-02-06 00:05:36 +0100 |
| commit | 64d46806b6218c97f68742c5663a8ae3a5fbe838 (patch) | |
| tree | dae05e9ed5cee0d1fbd257058b953f21df4ca9b1 /include/net/netfilter/nf_tables.h | |
| parent | netfilter: nft_ct: fix missing NFT_CT_L3PROTOCOL key in validity checks (diff) | |
| download | kernel-qcow2-linux-64d46806b6218c97f68742c5663a8ae3a5fbe838.tar.gz kernel-qcow2-linux-64d46806b6218c97f68742c5663a8ae3a5fbe838.tar.xz kernel-qcow2-linux-64d46806b6218c97f68742c5663a8ae3a5fbe838.zip | |
netfilter: nf_tables: add AF specific expression support
For the reject module, we need to add AF-specific implementations to
get rid of incorrect module dependencies. Try to load an AF-specific
module first and fall back to generic modules.
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'include/net/netfilter/nf_tables.h')
| -rw-r--r-- | include/net/netfilter/nf_tables.h | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/include/net/netfilter/nf_tables.h b/include/net/netfilter/nf_tables.h index 57c8ff7955df..0f68e47d3e5e 100644 --- a/include/net/netfilter/nf_tables.h +++ b/include/net/netfilter/nf_tables.h @@ -252,6 +252,7 @@ void nf_tables_unbind_set(const struct nft_ctx *ctx, struct nft_set *set, * @owner: module reference * @policy: netlink attribute policy * @maxattr: highest netlink attribute number + * @family: address family for AF-specific types */ struct nft_expr_type { const struct nft_expr_ops *(*select_ops)(const struct nft_ctx *, @@ -262,6 +263,7 @@ struct nft_expr_type { struct module *owner; const struct nla_policy *policy; unsigned int maxattr; + u8 family; }; /** @@ -529,6 +531,9 @@ void nft_unregister_expr(struct nft_expr_type *); #define MODULE_ALIAS_NFT_CHAIN(family, name) \ MODULE_ALIAS("nft-chain-" __stringify(family) "-" name) +#define MODULE_ALIAS_NFT_AF_EXPR(family, name) \ + MODULE_ALIAS("nft-expr-" __stringify(family) "-" name) + #define MODULE_ALIAS_NFT_EXPR(name) \ MODULE_ALIAS("nft-expr-" name) |