]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: nfnetlink_hook: translate inet ingress to netdev
authorPablo Neira Ayuso <pablo@netfilter.org>
Fri, 6 Aug 2021 10:33:57 +0000 (12:33 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Fri, 6 Aug 2021 15:07:41 +0000 (17:07 +0200)
commit318614931be16b7fa83cdf98fcd8bdeda021a136
treea5b3b789114719e8dfcafadc84cf9b77b63f67b3
parent49a1d21c4cf10a0bf63920200c45c03597a4879b
netfilter: nfnetlink_hook: translate inet ingress to netdev

The NFPROTO_INET pseudofamily is not exposed through this new netlink
interface. The netlink dump either shows NFPROTO_IPV4 or NFPROTO_IPV6
for NFPROTO_INET prerouting/input/forward/output/postrouting hooks.
The NFNLA_CHAIN_FAMILY attribute provides the family chain, which
specifies if this hook applies to inet traffic only (either IPv4 or
IPv6).

Translate the inet/ingress hook to netdev/ingress to fully hide the
NFPROTO_INET implementation details.

Fixes: 3da6980af338 ("netfilter: add new hook nfnl subsystem")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nfnetlink_hook.c