netfilter: nf_tables: expose enum nft_chain_flags through UAPI (67c49de4) · Commits · 戴 / test

include/net/netfilter/nf_tables.h

+1 −6

Original line number	Diff line number	Diff line
		@@ -921,11 +921,6 @@ static inline void nft_set_elem_update_expr(const struct nft_set_ext *ext,
		(expr) != (last); \
		(expr) = nft_expr_next(expr))

		enum nft_chain_flags {
		NFT_BASE_CHAIN = 0x1,
		NFT_CHAIN_HW_OFFLOAD = 0x2,
		};

		#define NFT_CHAIN_POLICY_UNSET U8_MAX

		/**
		@@ -1036,7 +1031,7 @@ static inline struct nft_base_chain nft_base_chain(const struct nft_chain chai

		static inline bool nft_is_base_chain(const struct nft_chain *chain)
		{
		return chain->flags & NFT_BASE_CHAIN;
		return chain->flags & NFT_CHAIN_BASE;
		}

		int __nft_release_basechain(struct nft_ctx *ctx);

+5 −0

Original line number	Diff line number	Diff line
		@@ -184,6 +184,11 @@ enum nft_table_attributes {
		};
		#define NFTA_TABLE_MAX (__NFTA_TABLE_MAX - 1)

		enum nft_chain_flags {
		NFT_CHAIN_BASE = (1 << 0),
		NFT_CHAIN_HW_OFFLOAD = (1 << 1),
		};

		/**
		* enum nft_chain_attributes - nf_tables chain netlink attributes
		*

+2 −2

Original line number	Diff line number	Diff line
		@@ -1903,7 +1903,7 @@ static int nft_basechain_init(struct nft_base_chain *basechain, u8 family,
		nft_basechain_hook_init(&basechain->ops, family, hook, chain);
		}

		chain->flags \|= NFT_BASE_CHAIN \| flags;
		chain->flags \|= NFT_CHAIN_BASE \| flags;
		basechain->policy = NF_ACCEPT;
		if (chain->flags & NFT_CHAIN_HW_OFFLOAD &&
		nft_chain_offload_priority(basechain) < 0)
		@@ -2255,7 +2255,7 @@ static int nf_tables_newchain(struct net net, struct sock nlsk,
		if (nlh->nlmsg_flags & NLM_F_REPLACE)
		return -EOPNOTSUPP;

		flags \|= chain->flags & NFT_BASE_CHAIN;
		flags \|= chain->flags & NFT_CHAIN_BASE;
		return nf_tables_updchain(&ctx, genmask, policy, flags);
		}