netfilter-devel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
* [PATCH nf-next 0/2] netfilter: new hook nfnl subsystem
@ 2021-06-01 16:21 Florian Westphal
  2021-06-01 16:21 ` [PATCH nf-next 1/2] netfilter: annotate nf_tables base hook ops Florian Westphal
  2021-06-01 16:21 ` [PATCH nf-next 2/2] netfilter: add new hook nfnl subsystem Florian Westphal
  0 siblings, 2 replies; 5+ messages in thread
From: Florian Westphal @ 2021-06-01 16:21 UTC (permalink / raw)
  To: netfilter-devel; +Cc: Florian Westphal

First patch is a required dependency to allow to check when
its safe to treat the 'priv' pointer as a nft base chain pointer.

Second patch adds a new nfnl subsystem to enable userspace to dump
the active hooks to userspace.

Previous patches added this to nf_tables instead, but technically
this isn't related to nf_tables.

Using a new nfnl subsys allows to extend this later, e.g. to
send out notifications, e.g. when a new base hook is registered.

Florian Westphal (2):
  netfilter: annotate nf_tables base hook ops
  netfilter: add new hook nfnl subsystem

 include/linux/netfilter.h                     |   8 +-
 include/uapi/linux/netfilter/nfnetlink.h      |   3 +-
 include/uapi/linux/netfilter/nfnetlink_hook.h |  54 +++
 net/netfilter/Kconfig                         |   9 +
 net/netfilter/Makefile                        |   1 +
 net/netfilter/nf_tables_api.c                 |   4 +-
 net/netfilter/nfnetlink_hook.c                | 375 ++++++++++++++++++
 7 files changed, 451 insertions(+), 3 deletions(-)
 create mode 100644 include/uapi/linux/netfilter/nfnetlink_hook.h
 create mode 100644 net/netfilter/nfnetlink_hook.c

-- 
2.26.3


^ permalink raw reply	[flat|nested] 5+ messages in thread

end of thread, other threads:[~2021-06-04  5:46 UTC | newest]

Thread overview: 5+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2021-06-01 16:21 [PATCH nf-next 0/2] netfilter: new hook nfnl subsystem Florian Westphal
2021-06-01 16:21 ` [PATCH nf-next 1/2] netfilter: annotate nf_tables base hook ops Florian Westphal
2021-06-01 16:21 ` [PATCH nf-next 2/2] netfilter: add new hook nfnl subsystem Florian Westphal
2021-06-04  3:00   ` [netfilter] a0aa657b74: WARNING:at_kernel/locking/lockdep.c:#lockdep_init_map_type kernel test robot
2021-06-04  5:46     ` Florian Westphal

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).