netfilter-devel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
 messages from 2023-05-03 12:56:29 to 2023-05-16 15:06:47 UTC [more...]

[PATCH -stable,4.19 0/9] stable fixes for 4.19
 2023-05-16 15:06 UTC  (5+ messages)
` [PATCH -stable,4.19 1/9] netfilter: nftables: add nft_parse_register_load() and use it
` [PATCH -stable,4.19 2/9] netfilter: nftables: add nft_parse_register_store() "
` [PATCH -stable,4.19 3/9] netfilter: nftables: statify nft_parse_register()
` [PATCH -stable,4.19 4/9] netfilter: nf_tables: validate registers coming from userspace

[PATCH -stable,5.4 0/9] stable fixes for 5.4
 2023-05-16 14:44 UTC  (10+ messages)
` [PATCH -stable,5.4 1/9] netfilter: nftables: add nft_parse_register_load() and use it
` [PATCH -stable,5.4 2/9] netfilter: nftables: add nft_parse_register_store() "
` [PATCH -stable,5.4 3/9] netfilter: nftables: statify nft_parse_register()
` [PATCH -stable,5.4 4/9] netfilter: nf_tables: validate registers coming from userspace
` [PATCH -stable,5.4 5/9] netfilter: nf_tables: add nft_setelem_parse_key()
` [PATCH -stable,5.4 6/9] netfilter: nf_tables: allow up to 64 bytes in the set element data area
` [PATCH -stable,5.4 7/9] netfilter: nf_tables: stricter validation of element data
` [PATCH -stable,5.4 8/9] netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag
` [PATCH -stable,5.4 9/9] netfilter: nf_tables: hold mutex on netns pre_exit path

[PATCH nf-next] netfilter: nf_tables: disable delset and delsetelem on anonymous sets
 2023-05-16 13:24 UTC 

[PATCH v2] ipvs: increase ip_vs_conn_tab_bits range for 64BIT
 2023-05-16  5:35 UTC  (4+ messages)

Patch for -stable, 6.3.x
 2023-05-16  3:58 UTC 

ct state vmap no longer works on 6.3 kernel
 2023-05-16  1:03 UTC 

[PATCH v11 00/12] Network support for Landlock
 2023-05-15 16:13 UTC  (13+ messages)
` [PATCH v11 01/12] landlock: Make ruleset's access masks more generic
` [PATCH v11 02/12] landlock: Allow filesystem layout changes for domains without such rule type
` [PATCH v11 03/12] landlock: Refactor landlock_find_rule/insert_rule
` [PATCH v11 04/12] landlock: Refactor merge/inherit_ruleset functions
` [PATCH v11 05/12] landlock: Move and rename layer helpers
` [PATCH v11 06/12] landlock: Refactor "
` [PATCH v11 07/12] landlock: Refactor landlock_add_rule() syscall
` [PATCH v11 08/12] landlock: Add network rules and TCP hooks support
` [PATCH v11 09/12] selftests/landlock: Share enforce_ruleset()
` [PATCH v11 10/12] selftests/landlock: Add 11 new test suites dedicated to network
` [PATCH v11 11/12] samples/landlock: Add network demo
` [PATCH v11 12/12] landlock: Document Landlock's network support

[PATCH] ipvs: change ip_vs_conn_tab_bits range to [8,31]
 2023-05-14 20:40 UTC  (5+ messages)

[PATCH] netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT
 2023-05-14 15:17 UTC  (2+ messages)

[PATCH netfilter -stable,4.14 0/6] stable fixes for 4.14
 2023-05-13  6:20 UTC  (10+ messages)
` [PATCH -stable,4.14 1/6] netfilter: nf_tables: split set destruction in deactivate and destroy phase
` [PATCH -stable,4.14 2/6] netfilter: nf_tables: unbind set in rule from commit path
` [PATCH -stable,4.14 3/6] netfilter: nft_hash: fix nft_hash_deactivate
` [PATCH -stable,4.14 4/6] netfilter: nf_tables: use-after-free in failing rule with bound set
` [PATCH -stable,4.14 5/6] netfilter: nf_tables: bogus EBUSY when deleting set after flush
` [PATCH -stable,4.14 6/6] netfilter: nf_tables: deactivate anonymous set from preparation phase

[PATCH nf-next] netfilter: nf_tables: relax set/map validation checks
 2023-05-12 12:19 UTC 

[PATCH nf-next] netfilter: nf_tables: always increment set element count
 2023-05-11 20:45 UTC 

[PATCH nf] netfilter: nft_set_rbtree: fix null deref on element insertion
 2023-05-11 20:39 UTC 

[PATCH AUTOSEL 5.15 4/5] netfilter: nf_tables: deactivate anonymous set from preparation phase
 2023-05-11 19:40 UTC 

[PATCH AUTOSEL 4.19 2/2] netfilter: nf_tables: deactivate anonymous set from preparation phase
 2023-05-11 19:41 UTC 

[PATCH AUTOSEL 5.4 2/2] netfilter: nf_tables: deactivate anonymous set from preparation phase
 2023-05-11 19:41 UTC 

[PATCH AUTOSEL 5.10 3/3] netfilter: nf_tables: deactivate anonymous set from preparation phase
 2023-05-11 19:40 UTC 

[PATCH AUTOSEL 6.1 7/9] netfilter: nf_tables: deactivate anonymous set from preparation phase
 2023-05-11 19:39 UTC 

[PATCH AUTOSEL 6.2 08/10] netfilter: nf_tables: deactivate anonymous set from preparation phase
 2023-05-11 19:38 UTC 

[PATCH AUTOSEL 6.3 09/11] netfilter: nf_tables: deactivate anonymous set from preparation phase
 2023-05-11 19:37 UTC 

[PATCH nf-next 00/19] netfilter: nftables: dscp modification offload
 2023-05-11 16:36 UTC  (40+ messages)
` [PATCH nf-next 01/19] selftest: netfilter: use /proc for pid checking
` [PATCH nf-next 02/19] selftest: netfilter: no need for ps -x option
` [PATCH nf-next 04/19] selftest: netfilter: monitor result file sizes
` [PATCH nf-next 05/19] netfilter: nft_payload: refactor mangle operation
` [PATCH nf-next 06/19] netfilter: nft_payload: publish nft_payload_set
` [PATCH nf-next 07/19] netfilter: nft_payload: export mangle
` [PATCH nf-next 08/19] netfilter: nft_payload: use flag for checksum need
` [PATCH nf-next 09/19] netfilter: nft_payload: add offload flag define
` [PATCH nf-next 10/19] netfilter: nft_payload: allow offload in the netlink
` [PATCH nf-next 11/19] netfilter: conntrack: nft extension Kconfig
` [PATCH nf-next 12/19] netfilter: nft: empty nft conntrack extension
` [PATCH nf-next 13/19] netfilter: conntrack: register nft extension
` [PATCH nf-next 14/19] netfilter: nft: add payload context into extension
` [PATCH nf-next 15/19] netfilter: nft: add payload application
` [PATCH nf-next 16/19] netfilter: nftables: fast path payload mangle
` [PATCH nf-next 17/19] netfilter: nftables: payload save mechanism
` [PATCH nf-next 18/19] netfilter: nft_payload: save payload if needed
` [PATCH nf-next 19/19] selftests: netfilter: dscp offload test

[PATCH nf] netfilter: nf_tables: fix nft_trans type confusion
 2023-05-11 12:19 UTC 

[PATCH net-next] netfilter: Reorder fields in 'struct nf_conntrack_expect'
 2023-05-11  9:24 UTC  (2+ messages)

[PATCH nf-next,v2 1/3] netfilter: flowtable: simplify route logic
 2023-05-11  5:35 UTC  (3+ messages)
` [PATCH nf-next,v2 2/3] netfilter: flowtable: split IPv4 datapath in helper functions
` [PATCH nf-next,v2 3/3] netfilter: flowtable: split IPv6 "

[PATCH net 0/7] Netfilter updates for net
 2023-05-11  2:20 UTC  (9+ messages)
` [PATCH net 1/7] netfilter: nf_tables: always release netdev hooks from notifier
` [PATCH net 2/7] netfilter: conntrack: fix possible bug_on with enable_hooks=1
` [PATCH net 3/7] selftests: nft_flowtable.sh: use /proc for pid checking
` [PATCH net 4/7] selftests: nft_flowtable.sh: no need for ps -x option
` [PATCH net 5/7] selftests: nft_flowtable.sh: wait for specific nc pids
` [PATCH net 6/7] selftests: nft_flowtable.sh: monitor result file sizes
` [PATCH net 7/7] selftests: nft_flowtable.sh: check ingress/egress chain too

[PATCH RESEND 0/4] Fix oops about sleeping in led_trigger_blink()
 2023-05-10 22:53 UTC  (8+ messages)
` [PATCH RESEND 1/4] leds: Change led_trigger_blink[_oneshot]() delay parameters to pass-by-value
` [PATCH RESEND 2/4] leds: Fix set_brightness_delayed() race
` [PATCH RESEND 3/4] leds: Fix oops about sleeping in led_trigger_blink()
` [PATCH RESEND 4/4] leds: Clear LED_INIT_DEFAULT_TRIGGER when clearing current trigger

New Linux kernel NetFilter flaw gives attackers root privileges
 2023-05-10 16:14 UTC 

[PATCH nf-next 0/3] netfilter: nf_tables: reject loads from uninitialized registers
 2023-05-10 15:46 UTC  (14+ messages)
` [PATCH nf-next 1/3] netfilter: nf_tables: pass context structure to nft_parse_register_load
` [PATCH nf-next 2/3] netfilter: nf_tables: validate register loads never access unitialised registers
` [PATCH nf-next 3/3] netfilter: nf_tables: don't initialize registers in nft_do_chain()

Anouncement: Netdevconf 0x17
 2023-05-10 12:03 UTC 

[nft PATCH] evaluate: Reject set stmt refs to sets without dynamic flag
 2023-05-10 11:48 UTC  (3+ messages)

[PATCH nf-next 1/3] netfilter: flowtable: simplify route logic
 2023-05-10  7:36 UTC  (3+ messages)
` [PATCH nf-next 2/3] netfilter: flowtable: split IPv4 datapath in helper functions
` [PATCH nf-next 3/3] netfilter: flowtable: split IPv6 "

[PATCH nf-next v2 0/4] selftest: netfilter: small test tweaks
 2023-05-10  7:09 UTC  (6+ messages)
` [PATCH nf-next v2 1/4] selftest: netfilter: use /proc for pid checking
` [PATCH nf-next v2 2/4] selftest: netfilter: no need for ps -x option
` [PATCH nf-next v2 3/4] selftest: netfilter: wait for specific nc pids
` [PATCH nf-next v2 4/4] selftest: netfilter: monitor result file sizes

[PATCH nf] testing: selftests: nft_flowtable.sh: check ingress/egress chain too
 2023-05-10  6:40 UTC  (2+ messages)

[PATCH nf] netfilter: fix possible bug_on with enable_hooks=1
 2023-05-10  6:33 UTC  (2+ messages)

[PATCH nf] netfilter: nf_tables: always release netdev hooks from notifier
 2023-05-10  6:32 UTC  (2+ messages)

[PATCH nf-next v4] netfilter: nft_exthdr: add boolean DCCP option matching
 2023-05-09 21:19 UTC 

[PATCH nft 1/2] datatype: misspell support with symbol table parser for error reporting
 2023-05-09 15:48 UTC  (2+ messages)
` [PATCH nft 2/2] datatype: add hint on error handler

[PATCH 00/11 nf-next,v1] track, reduce and prefetch expression
 2023-05-09 10:23 UTC  (14+ messages)
` [PATCH nf-next,v1 01/12] netfilter: nf_tables: add nft_expr_info_setup() helper function
` [PATCH nf-next,v1 02/12] netfilter: nf_tables: add nft_reg_store_*() and use it
` [PATCH nf-next,v1 03/12] netfilter: nf_tables: update nft_copy_data() to take struct nft_regs
` [PATCH nf-next,v1 04/12] netfilter: nf_tables: add nft_reg_load*() and use it
` [PATCH nf-next,v1 05/12] netfilter: nf_tables: check if register contains valid data before access
` [PATCH nf-next,v1 06/12] netfilter: nf_tables: add struct nft_reg_track and use it
` [PATCH nf-next,v1 07/12] netfilter: nf_tables: split expression comparison and reduction
` [PATCH nf-next,v1 08/12] netfilter: nf_tables: remove bitwise register tracking
` [PATCH nf-next,v1 09/12] netfilter: nf_tables: cancel tracking when register differs from expression
` [PATCH nf-next,v1 10/12] netfilter: nf_tables: add track infrastructure to prepare for expression prefetch
` [PATCH nf-next,v1 11/12] netfilter: nf_tables: add expression prefetch infrastructure
` [PATCH nf-next,v1 12/12] netfilter: nf_tables: re-enable expression reduction

[PATCH 0/2] netfilter: nfnetlink_log & nfnetlink_queue: enable cgroup id socket info
 2023-05-09 10:00 UTC  (5+ messages)
` [PATCH 1/2] netfilter: nfnetlink_log: enable cgroup id socket info retrieval
` [PATCH 2/2] netfilter: nfnetlink_queue: "

nft transaction semantics and flowtable hw offload
 2023-05-08 20:25 UTC  (3+ messages)

[PATCH nftables 0/8] Support for shifted port-ranges in NAT
 2023-05-08 19:47 UTC  (10+ messages)
` [PATCH nftables 8/8] test: py: add tests for shifted nat port-ranges

[PATCH nf] netfilter: nf_tables: integrate pipapo into commit protocol
 2023-05-08 14:02 UTC  (2+ messages)

[PATCH nft 1/3] evaluate: allow stateful statements with anonymous verdict maps
 2023-05-08  6:07 UTC  (3+ messages)
` [PATCH nft 2/3] evaluate: skip optimization if anonymous set uses stateful statement
` [PATCH nft 3/3] optimize: do not remove counter in verdict maps

[PATCH v2 net-next] netfilter: nft_set_pipapo: Use struct_size()
 2023-05-06  7:36 UTC  (2+ messages)

[PATCH net-next] netfilter: nft_set_pipapo: Use struct_size()
 2023-05-05 21:20 UTC 

[iptables PATCH 0/4] Implement a best-effort forward compat solution
 2023-05-05 18:34 UTC  (5+ messages)
` [iptables PATCH 1/4] nft: Pass nft_handle to add_{target,action}()
` [iptables PATCH 2/4] nft: Introduce and use bool nft_handle::compat
` [iptables PATCH 3/4] Add --compat option to *tables-nft and *-nft-restore commands
` [iptables PATCH 4/4] tests: Test compat mode

[PATCH AUTOSEL 5.10 22/24] ipvs: Update width of source for ip_vs_sync_conn_options
 2023-05-04 19:49 UTC 

[PATCH AUTOSEL 6.1 39/49] ipvs: Update width of source for ip_vs_sync_conn_options
 2023-05-04 19:46 UTC 

[PATCH AUTOSEL 5.15 27/30] ipvs: Update width of source for ip_vs_sync_conn_options
 2023-05-04 19:48 UTC 

[PATCH AUTOSEL 6.2 43/53] ipvs: Update width of source for ip_vs_sync_conn_options
 2023-05-04 19:44 UTC 

[PATCH AUTOSEL 6.3 49/59] ipvs: Update width of source for ip_vs_sync_conn_options
 2023-05-04 19:41 UTC 

[PATCH net 0/1] Netfilter fixes for net
 2023-05-04  9:10 UTC  (3+ messages)
` [PATCH net 1/1] netfilter: nf_tables: fix ct untracked match breakage

[iptables PATCH 0/3] Extract nftnl_rule parsing code
 2023-05-03 17:36 UTC  (2+ messages)

[PATCH nft] payload: add offload flag to the statements
 2023-05-03 12:56 UTC 


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).