forge/linux-pinenote
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

netfilter: ctnetlink: deliver labels to userspace

Browse source 
Introduce CTA_LABELS attribute to send a bit-vector of currently active labels
to userspace.

Future patch will permit userspace to also set/delete active labels.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
This commit is contained in:
Florian Westphal 2013-01-11 06:30:45 +00:00 • committed by Pablo Neira Ayuso
parent c539f01717
commit 0ceabd8387
4 changed files with 44 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

1
include/uapi/linux/netfilter/nf_conntrack_common.h
View file

@ -101,6 +101,7 @@ enum ip_conntrack_events {
IPCT_MARK, /* new mark has been set */
IPCT_NATSEQADJ, /* NAT is doing sequence adjustment */
IPCT_SECMARK, /* new security mark has been set */
IPCT_LABEL, /* new connlabel has been set */
};
enum ip_conntrack_expect_events {

1
include/uapi/linux/netfilter/nfnetlink_conntrack.h
View file

@ -49,6 +49,7 @@ enum ctattr_type {
CTA_SECCTX,
CTA_TIMESTAMP,
CTA_MARK_MASK,
CTA_LABELS,
__CTA_MAX
};
#define CTA_MAX (__CTA_MAX - 1)