Jozsef Kadlecsik
a7b4f989a6
netfilter: ipset: IP set core support ...
The patch adds the IP set core support to the kernel.
The IP set core implements a netlink (nfnetlink) based protocol by which
one can create, destroy, flush, rename, swap, list, save, restore sets,
and add, delete, test elements from userspace. For simplicity (and backward
compatibilty and for not to force ip(6)tables to be linked with a netlink
library) reasons a small getsockopt-based protocol is also kept in order
to communicate with the ip(6)tables match and target.
The netlink protocol passes all u16, etc values in network order with
NLA_F_NET_BYTEORDER flag. The protocol enforces the proper use of the
NLA_F_NESTED and NLA_F_NET_BYTEORDER flags.
For other kernel subsystems (netfilter match and target) the API contains
the functions to add, delete and test elements in sets and the required calls
to get/put refereces to the sets before those operations can be performed.
The set types (which are implemented in independent modules) are stored
in a simple RCU protected list. A set type may have variants: for example
without timeout or with timeout support, for IPv4 or for IPv6. The sets
(i.e. the pointers to the sets) are stored in an array. The sets are
identified by their index in the array, which makes possible easy and
fast swapping of sets. The array is protected indirectly by the nfnl
mutex from nfnetlink. The content of the sets are protected by the rwlock
of the set.
There are functional differences between the add/del/test functions
for the kernel and userspace:
- kernel add/del/test: works on the current packet (i.e. one element)
- kernel test: may trigger an "add" operation in order to fill
out unspecified parts of the element from the packet (like MAC address)
- userspace add/del: works on the netlink message and thus possibly
on multiple elements from the IPSET_ATTR_ADT container attribute.
- userspace add: may trigger resizing of a set
Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Signed-off-by: Patrick McHardy <kaber@trash.net>
2011-02-01 15:28:35 +01:00
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/djbw/async_tx
2011-01-17 10:54:41 -08:00
net/ceph: make ceph_msgr_wq non-reentrant
2011-01-12 15:15:14 -08:00
decompressors: remove unused constant from inflate.h
2011-01-13 08:03:25 -08:00
hwmon: Support for Dallas Semiconductor DS620
2011-01-09 09:10:10 -08:00
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input
2011-01-13 09:58:14 -08:00
lockd: Clean up nlmsvc_lookup_host()
2010-12-16 12:37:26 -05:00
mfd: ab8500-core chip version cut 2.0 support
2011-01-14 12:38:18 +01:00
IB/mlx4: Handle protocol field in multicast table
2011-01-12 14:49:17 -08:00
Merge branch 'sh/sdio' into sh-latest
2011-01-12 14:37:42 +09:00
mtd: add writebufsize field to mtd_info struct
2011-01-06 15:35:50 +00:00
netfilter: ipset: IP set core support
2011-02-01 15:28:35 +01:00
netfilter: xtables: add missing header inclusions for headers_check
2011-01-20 17:50:17 +01:00
netfilter: xtables: add missing header inclusions for headers_check
2011-01-20 17:50:17 +01:00
netfilter: xtables: add missing header inclusions for headers_check
2011-01-20 17:50:17 +01:00
NFC: Driver for NXP Semiconductors PN544 NFC chip.
2011-01-13 08:03:19 -08:00
nfsd: don't support msnfs export option
2011-01-13 21:04:07 -05:00
power_supply: Add MAX17042 Fuel Gauge Driver
2011-01-14 18:11:59 +03:00
regulator: Add initial per-regulator debugfs support
2011-01-12 14:33:05 +00:00
Merge branch 'next-spi' of git://git.secretlab.ca/git/linux-2.6
2011-01-07 17:08:46 -08:00
Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6
2010-12-26 22:37:05 -08:00
Merge branch 'for-2.6.38' of git://linux-nfs.org/~bfields/linux
2011-01-14 13:17:26 -08:00
include/linux/unaligned/packed_struct.h: use __packed
2011-01-13 08:03:08 -08:00
Merge branch 'usb-next' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb-2.6
2011-01-07 13:16:28 -08:00
ACPI / PM: Fix build problems for !CONFIG_ACPI related to NVS rework
2011-01-12 16:11:30 -05:00
Merge branch 'master' of /repos/git/net-next-2.6
2011-01-19 23:51:37 +01:00
autofs4: Bump version
2011-01-15 20:07:45 -05:00
netdev: bfin_mac: let boards set vlan masks
2011-01-10 13:31:14 -08:00
binfmt_elf: cleanups
2011-01-13 08:03:12 -08:00
bit_spinlock: add required includes
2011-01-07 17:50:31 +11:00
Merge branch 'for-2.6.38/core' of git://git.kernel.dk/linux-2.6-block
2011-01-13 10:45:01 -08:00
bootmem: Add alloc_bootmem_align()
2010-12-13 16:11:13 -08:00
fs/char_dev.c: remove unused cdev_index()
2011-01-13 08:03:17 -08:00
cdrom: add ->check_events() support
2010-12-16 17:53:38 +01:00
clarify a usage constraint for cnt32_to_63()
2010-12-20 09:07:35 -08:00
thp: use compaction in kswapd for GFP_ATOMIC order > 0
2011-01-13 17:32:46 -08:00
sched: Change wait_for_completion_*_timeout() to return a signed long
2011-01-05 14:15:50 +01:00
tty: add 'active' sysfs attribute to tty0 and console device
2010-12-16 16:15:34 -08:00
Add CPER PCIe error section structure and constants definition
2010-12-13 23:40:45 -05:00
cpuidle: CPUIDLE_FLAG_CHECK_BM is omap3_idle specific
2011-01-12 12:47:34 -05:00
cramfs: hide function prototypes behind __KERNEL__ macro
2011-01-13 08:03:22 -08:00
drivers/staging/olpc_dcon: convert to new cs5535 gpio API
2011-01-13 08:03:13 -08:00
Allow d_manage() to be used in RCU-walk mode
2011-01-15 20:07:47 -05:00
dcbnl: adding DCBX feature flags get-set
2010-12-31 10:50:54 -08:00
headers: path.h redux
2011-01-10 08:51:44 -08:00
dm: per target unplug callback support
2011-01-13 20:00:02 +00:00
Merge branch 'driver-core-next' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core-2.6
2011-01-10 16:10:33 -08:00
dm: use non reentrant workqueues if equivalent
2011-01-13 19:59:58 +00:00
dm log userspace: add version number to comms
2011-01-13 19:59:52 +00:00
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/djbw/async_tx
2011-01-17 10:54:41 -08:00
dynamic debug: Fix build issue with older gcc
2011-01-07 23:36:59 -05:00
core: Replace __get_cpu_var with __this_cpu_read if not used for an address.
2010-12-17 15:07:19 +01:00
etherdevice.h: Add is_unicast_ether_addr function
2011-01-13 21:49:56 -08:00
ext3: speed up file creates by optimizing rec_len functions
2011-01-10 19:04:07 +01:00
fs: add hole punching to fallocate
2011-01-12 20:16:43 -05:00
fanotify: split version into version and metadata_len
2010-12-15 13:56:33 -05:00
Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux-2.6
2010-12-22 12:56:10 +09:00
Add an AT_NO_AUTOMOUNT flag to suppress terminal automount
2011-01-15 20:07:33 -05:00
net/fec: add mac field into platform data and consolidate fec_get_mac
2011-01-09 15:42:55 -08:00
fs: Remove unlikely() from fput_light()
2011-01-17 03:26:26 -05:00
firewire: use split transaction timeout only for split transactions
2011-01-04 08:48:34 +01:00
headers: kobject.h redux
2011-01-10 08:51:44 -08:00
fs: fix address space warnings in ioctl_fiemap()
2011-01-17 08:21:42 -05:00
fs: fs_struct use seqlock
2011-01-07 17:50:27 +11:00
fs: dcache remove dcache_lock
2011-01-07 17:50:23 +11:00
fs: dcache remove dcache_lock
2011-01-07 17:50:23 +11:00
fs: provide rcu-walk aware permission i_ops
2011-01-07 17:50:29 +11:00
Merge branch 'for-2.6.38/event-handling' into for-2.6.38/core
2011-01-13 14:47:54 +01:00
thp: add numa awareness to hugepage allocations
2011-01-13 17:32:45 -08:00
i2c: Add generic I2C multiplexer using GPIO API
2011-01-10 22:11:23 +01:00
include/gpio.h: remove remaining __must_check-annotiations
2011-01-14 08:06:39 -08:00
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/hid
2011-01-13 09:58:38 -08:00
highmem: Use this_cpu_xx_return() operations
2010-12-17 15:18:04 +01:00
hrtimer.h: fix kernel-doc warning
2011-01-10 07:38:53 -08:00
thp: add compound_trans_head() helper
2011-01-13 17:32:48 -08:00
i2c: Constify i2c_client where possible
2011-01-10 22:11:23 +01:00
ieee80211: correct IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK macro
2011-01-13 15:46:45 -05:00
netfilter: ebtables: make broute table work again
2011-01-11 23:55:51 +01:00
include/linux/if_ether.h: Add #define ETH_P_LINK_CTL for HPNA and wlan local tunnel
2011-01-06 11:10:05 -08:00
net_device: add support for network device groups
2011-01-19 23:31:09 -08:00
net: typos in comments in include/linux/igmp.h
2011-01-04 11:29:52 -08:00
Merge branch 'sched-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip
2011-01-06 10:23:33 -08:00
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input
2011-01-13 09:58:14 -08:00
resources: add arch hook for preventing allocation in reserved areas
2010-12-17 10:01:09 -08:00
IPMI: Add one interface to get more info of low-level IPMI device
2010-12-14 00:21:51 -05:00
IPMI: Add one interface to get more info of low-level IPMI device
2010-12-14 00:21:51 -05:00
irq: use per_cpu kstat_irqs
2011-01-13 17:32:31 -08:00
ext4: dynamically allocate the jbd2_inode in ext4_inode_info as necessary
2011-01-10 12:29:43 -05:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2011-01-13 10:25:58 -08:00
mm: vmscan: reclaim order-0 and use compaction instead of lumpy reclaim
2011-01-13 17:32:33 -08:00
irq: use per_cpu kstat_irqs
2011-01-13 17:32:31 -08:00
thp: madvise(MADV_NOHUGEPAGE)
2011-01-13 17:32:47 -08:00
kmsg_dump: add kmsg_dump() calls to the reboot, halt, poweroff and emergency_restart paths
2011-01-13 08:03:07 -08:00
Merge branch 'for-2.6.38' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/percpu
2011-01-07 17:02:58 -08:00
block: add internal hd part table references
2011-01-07 08:43:37 +01:00
kthread_work: make lockdep happy
2010-12-22 10:27:53 +01:00
KVM: Add PV MSR to enable asynchronous page faults delivery.
2011-01-12 11:23:12 +02:00
KVM: Fix build error on s390 due to missing tlbs_dirty
2011-01-12 11:30:50 +02:00
KVM: Add memory slot versioning and use it to provide fast guest write interface
2011-01-12 11:23:08 +02:00
leds-lp5521: modify the way of setting led device name
2011-01-13 08:03:06 -08:00
leds: leds-lp5523: modify the way of setting led device name
2011-01-13 08:03:05 -08:00
[libata] avoid needlessly passing around ptr to SCSI completion func
2011-01-05 19:43:22 -05:00
kernel: fix hlist_bl again
2011-01-14 13:12:45 +00:00
ecryptfs: moved ECRYPTFS_SUPER_MAGIC definition to linux/magic.h
2011-01-17 10:44:31 -06:00
ext2: Resolve 'dereferencing pointer to incomplete type' when enabling EXT2_XATTR_DEBUG
2011-01-10 19:04:08 +01:00
memcg: fix memory migration of shmem swapcache
2011-01-13 17:32:51 -08:00
Merge branch 'slub/hotplug' into slab/urgent
2011-01-15 13:28:17 +02:00
mm: migration: cleanup migrate_pages API by matching types for offlining and sync
2011-01-13 17:32:34 -08:00
thp: madvise(MADV_NOHUGEPAGE)
2011-01-13 17:32:47 -08:00
thp: fix anon memory statistics with transparent hugepages
2011-01-13 17:32:46 -08:00
thp: add pmd_huge_pte to mm_struct
2011-01-13 17:32:41 -08:00
thp: mmu_notifier_test_young
2011-01-13 17:32:46 -08:00
thp: transparent hugepage vmstat
2011-01-13 17:32:43 -08:00
Merge commit 'v2.6.37-rc7' into x86/security
2010-12-23 09:48:41 +01:00
sanitize vfsmount refcounting changes
2011-01-16 13:47:07 -05:00
Add an AT_NO_AUTOMOUNT flag to suppress terminal automount
2011-01-15 20:07:33 -05:00
move internal-only parts of ncpfs headers to fs/ncpfs
2011-01-12 20:03:43 -05:00
move internal-only parts of ncpfs headers to fs/ncpfs
2011-01-12 20:03:43 -05:00
fs: avoid inode RCU freeing for pseudo fs
2011-01-07 17:50:26 +11:00
net: implement mechanism for HW based QOS
2011-01-19 23:31:10 -08:00
netfilter: allow NFQUEUE bypass if no listener is available
2011-01-18 16:08:30 +01:00
netlink: fix gcc -Wconversion compilation warning
2010-12-17 12:03:14 -08:00
NFS: Introduce new-style XDR decoding functions for NFSv2
2010-12-16 12:37:23 -05:00
Merge branch 'for-2.6.38' of git://linux-nfs.org/~bfields/linux
2011-01-14 13:17:26 -08:00
NFS: Use d_automount() rather than abusing follow_link()
2011-01-15 20:07:34 -05:00
NFS: Move cl_delegations to the nfs_server struct
2011-01-06 14:57:46 -05:00
NFSv4: Ensure continued open and lockowner name uniqueness
2011-01-06 16:03:13 -05:00
nl80211: add/fix mesh docs
2011-01-10 15:40:52 -05:00
x86, nmi_watchdog: Remove ARCH_HAS_NMI_WATCHDOG and rely on CONFIG_HARDLOCKUP_DETECTOR
2010-12-22 22:15:32 +01:00
of/address: use proper endianess in get_flags
2010-12-23 15:57:48 -07:00
dt/flattree: Return virtual address from early_init_dt_alloc_memory_arch()
2011-01-15 22:01:58 -07:00
thp: remove PG_buddy
2011-01-13 17:32:43 -08:00
Revert update for dirty_ratio for memcg.
2011-01-14 07:52:02 -08:00
mm: remove likely() from mapping_unevictable()
2011-01-13 17:32:36 -08:00
sanitize vfsmount refcounting changes
2011-01-16 13:47:07 -05:00
PCI / ACPI: Fix build of the AER driver for CONFIG_ACPI unset
2011-01-16 11:56:26 -08:00
PCI: Disable ASPM if BIOS asks us to
2010-12-23 12:53:08 -08:00
PCI / ACPI: Fix build issue in pci_root.c for !CONFIG_PCIEPORTBUS
2011-01-14 15:23:25 -08:00
Merge branch 'linux-next' of git://git.kernel.org/pub/scm/linux/kernel/git/jbarnes/pci-2.6
2011-01-14 09:29:05 -08:00
PCI/PCIe: Clear Root PME Status bits early during system resume
2010-12-23 12:54:03 -08:00
percpu: Generic this_cpu_cmpxchg() and this_cpu_xchg support
2010-12-18 15:54:04 +01:00
perf: Sysfs enumeration
2010-12-16 11:36:43 +01:00
pipe_fs_i.h: fix kernel-doc warning
2011-01-10 07:38:54 -08:00
net_sched: implement a root container qdisc sch_mqprio
2011-01-19 23:31:11 -08:00
PM: Prototype the pm_generic_ operations
2010-12-24 15:04:41 +01:00
PM / Runtime: Generic resume shouldn't set RPM_ACTIVE unconditionally
2010-12-24 15:04:06 +01:00
fs: provide simple rcu-walk generic_check_acl implementation
2011-01-07 17:50:29 +11:00
pps: add kernel consumer support
2011-01-13 08:03:21 -08:00
pps: capture MONOTONIC_RAW timestamps as well
2011-01-13 08:03:21 -08:00
include/linux/printk.h: use tab not spaces for indent
2011-01-13 08:03:10 -08:00
quota: Use %pV and __attribute__((format (printf in __quota_error and fix fallout
2011-01-10 19:04:05 +01:00
mm: migration: use rcu_dereference_protected when dereferencing the radix tree slot during file page migration
2011-01-13 17:32:48 -08:00
rcu: remove unused __list_for_each_rcu() macro
2010-12-17 12:34:59 -08:00
fs: hlist UP debug fixup
2011-01-14 02:36:43 +00:00
rcu: increase synchronize_sched_expedited() batching
2010-12-17 12:34:08 -08:00
fs: provide rcu-walk aware permission i_ops
2011-01-07 17:50:29 +11:00
rapidio: add definitions of Component Tag fields
2011-01-13 08:03:18 -08:00
rapidio: use common destid storage for endpoints and switches
2011-01-13 08:03:17 -08:00
rapidio: add new idt sRIO switches
2011-01-13 08:03:18 -08:00
thp: transparent hugepage core
2011-01-13 17:32:42 -08:00
romfs: have romfs_fs.h pull in necessary headers
2011-01-13 08:03:23 -08:00
rtc: Namespace fixup
2010-12-13 22:48:21 +01:00
s3c_adc_battery: Add gpio_inverted field to pdata
2010-12-22 02:39:57 +03:00
thp: khugepaged
2011-01-13 17:32:43 -08:00
Merge branch 'master' into next
2011-01-10 09:46:24 +11:00
kernel: optimise seqlock
2011-01-07 17:50:27 +11:00
pps: unify timestamp gathering
2011-01-13 08:03:19 -08:00
Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/torvalds/linux-2.6 into common/serial-rework
2011-01-13 15:06:28 +09:00
Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6 into HEAD
2011-01-13 10:29:21 +09:00
kernel: kmem_ptr_validate considered harmful
2011-01-07 17:50:16 +11:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2011-01-13 10:25:58 -08:00
sony-laptop: support new hotkeys on the P, Z and EC series
2011-01-10 12:00:22 -05:00
Merge branch 'release' of git://git.kernel.org/pub/scm/linux/kernel/git/lenb/linux-acpi-2.6
2011-01-13 20:15:35 -08:00
thp: transparent hugepage core
2011-01-13 17:32:42 -08:00
taskstats: pad taskstats netlink response for aligment issues on ia64
2010-12-22 19:43:34 -08:00
Merge branch 'misc' into release
2011-01-12 05:14:15 -05:00
pps: capture MONOTONIC_RAW timestamps as well
2011-01-13 08:03:21 -08:00
ntp: add hardpps implementation
2011-01-13 08:03:20 -08:00
tipc: cleanup various cosmetic whitespace issues
2011-01-01 13:57:56 -08:00
tipc: cleanup various cosmetic whitespace issues
2011-01-01 13:57:56 -08:00
toshiba.h: hide a function prototypes behind __KERNEL__ macro
2011-01-13 08:03:08 -08:00
tracepoint: Add __rcu annotation
2011-01-07 20:57:22 -05:00
tty: fix typos/errors in tty_driver.h comments
2010-12-16 13:14:32 -08:00
pps: timestamp is always passed to dcd_change()
2011-01-13 08:03:20 -08:00
Input: introduce device properties
2010-12-20 09:37:33 +01:00
Merge branch 'usb-next' into musb-merge
2010-12-16 10:05:06 -08:00
user_ns: improve the user_ns on-the-slab packaging
2011-01-13 08:03:18 -08:00
vga_switcheroo: fix build with non switcheroo enabled path.
2011-01-06 13:05:04 +10:00
mm: unify module_alloc code for vmalloc
2011-01-13 17:32:34 -08:00
mm: vmstat: use a single setter function and callback for adjusting percpu thresholds
2011-01-13 17:32:31 -08:00
Merge branch 'for-2.6.38' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/wq
2011-01-07 16:58:04 -08:00
decompressors: add XZ decompressor module
2011-01-13 08:03:24 -08:00
