This patch adds netns support for ipset. Major changes were made in ip_set_core.c and ip_set.h. Global variables are moved to per net namespace. Added initialization code and the destruction of the network namespace ipset subsystem. In the prototypes of public functions ip_set_* added parameter "struct net*". The remaining corrections related to the change prototypes of public functions ip_set_*. The patch for git://git.netfilter.org/ipset.git commit 6a4ec96c0b8caac5c35474e40e319704d92ca347 Signed-off-by: Vitaly Lavrov -- kernel/include/linux/netfilter/ipset/ip_set.h | 16 ++- kernel/net/netfilter/ipset/ip_set_bitmap_ip.c | 3 +- kernel/net/netfilter/ipset/ip_set_bitmap_ipmac.c | 2 +- kernel/net/netfilter/ipset/ip_set_bitmap_port.c | 3 +- kernel/net/netfilter/ipset/ip_set_core.c | 286 +++++++++++++++++++++++++-------------- kernel/net/netfilter/ipset/ip_set_hash_gen.h | 3 +- kernel/net/netfilter/ipset/ip_set_list_set.c | 31 +++-- kernel/net/netfilter/xt_set.c | 40 +++--- kernel/net/sched/em_ipset.c | 7 +- 9 files changed, 243 insertions(+), 148 deletions(-)