Christian Göttsche
fb96194545
netfilter: nf_tables: add SECMARK support ...
Add the ability to set the security context of packets within the nf_tables framework.
Add a nft_object for holding security contexts in the kernel and manipulating packets on the wire.
Convert the security context strings at rule addition time to security identifiers.
This is the same behavior like in xt_SECMARK and offers better performance than computing it per packet.
Set the maximum security context length to 256.
Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
Acked-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2018-09-28 14:28:29 +02:00
9p: Embed wait_queue_head into p9_req_t
2018-08-13 09:21:44 +09:00
Bluetooth: Add definitions for LE set address resolution
2018-08-10 16:57:57 +02:00
caif: reduce stack size with KASAN
2018-01-19 14:02:12 -05:00
Revert changes to convert to ->poll_mask() and aio IOCB_CMD_POLL
2018-06-28 10:40:47 -07:00
netfilter: nf_tables: add SECMARK support
2018-09-28 14:28:29 +02:00
ipv6: Add icmp_echo_ignore_all support for ICMPv6
2018-08-13 08:42:25 -07:00
proc: introduce proc_create_net{,_data}
2018-05-16 07:24:30 +02:00
net/sctp: Replace in/out stream arrays with flex_array
2018-08-11 12:25:15 -07:00
Merge ra.kernel.org:/pub/scm/linux/kernel/git/torvalds/linux
2018-07-20 21:17:12 -07:00
Revert "net: sched: act: add extack for lookup callback"
2018-08-31 22:50:15 -07:00
bpf: Introduce BPF_PROG_TYPE_SK_REUSEPORT
2018-08-11 01:58:46 +02:00
ieee802154: add rx LQI from userspace
2018-07-13 12:18:18 -04:00
rxrpc: Push iov_iter up from rxrpc_kernel_recv_data() to caller
2018-08-03 12:46:20 -07:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
vsock: split dwork to avoid reinitializations
2018-08-07 12:39:13 -07:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
ipv4: Make neigh lookup keys for loopback/point-to-point devices be INADDR_ANY
2018-01-15 14:53:43 -05:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
proc: introduce proc_create_seq{,_data}
2018-05-16 07:23:35 +02:00
net-next: ax88796: add interrupt status callback to platform data
2018-04-19 16:11:11 -04:00
include/net/bond_3ad: Simplify the code by using the ARRAY_SIZE
2018-08-04 13:23:15 -07:00
net: Add lag.h, net_lag_port_dev_txable()
2018-07-11 23:10:19 -07:00
net: remove sock_poll_busy_flag
2018-07-30 09:10:25 -07:00
cfg80211: add he_capabilities (ext) IE to AP settings
2018-09-05 10:03:13 +02:00
net: remove compat_sys_*() prototypes from net/compat.h
2018-04-02 20:16:17 +02:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
net: dcb: Add priority-to-DSCP map getters
2018-07-27 13:17:50 -07:00
devlink: Add generic parameters region_snapshot
2018-07-12 17:37:13 -07:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2017-11-04 09:26:51 +09:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
net/decnet: Convert timers to use timer_setup()
2017-10-18 12:39:36 +01:00
decnet: Move dn_next into decnet route structure.
2017-11-30 09:54:25 -05:00
net: dsa: Add Lantiq / Intel GSWIP tag support
2018-09-13 08:14:33 -07:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
xfrm: Remove xfrmi interface ID from flowi
2018-07-20 10:14:41 +02:00
net: core: dst_cache_set_ip6: Rename 'addr' parameter to 'saddr' for consistency
2018-03-05 12:52:45 -05:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2017-11-04 09:26:51 +09:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
erspan: set bso bit based on mirrored packet's len
2018-05-20 18:31:42 -04:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
inet: whitespace cleanup
2018-02-28 11:43:28 -05:00
net: Introduce generic failover module
2018-05-28 22:59:54 -04:00
net: Add extack to fib_notifier_info
2017-11-01 11:50:43 +09:00
net: fib_rules: add extack support
2018-04-23 10:21:24 -04:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
xfrm: Remove xfrmi interface ID from flowi
2018-07-20 10:14:41 +02:00
flow_dissector: allow dissection of tunnel options from metadata
2018-08-07 12:22:14 -07:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
fq: support filtering a given tin
2017-10-11 09:49:34 +02:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2017-10-30 21:09:24 +09:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
net: core: protect rate estimator statistics pointer with lock
2018-08-11 12:37:10 -07:00
genetlink: constify genl_err_attr() argument
2018-08-29 19:42:52 -07:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
net: GRE: Add is_gretap_dev, is_ip6gretap_dev
2018-02-27 14:46:26 -05:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
fou: fix some member types in guehdr
2017-12-11 14:10:06 -05:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
mac80211: support reporting 0-length PSDU in radiotap
2018-09-05 10:08:25 +02:00
net/ipv6: Add support for specifying metric of connected routes
2018-05-29 10:12:45 -04:00
net: sched: ife: handle malformed tlv length
2018-04-22 21:12:00 -04:00
net: Convert GRO SKB handling to list_head.
2018-06-26 11:33:04 +09:00
inet/connection_sock: prefer _THIS_IP_ to current_text_addr
2018-08-14 10:04:36 -07:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2017-11-04 09:26:51 +09:00
ip: add helpers to process in-order fragments faster.
2018-08-11 17:54:18 -07:00
inet: Add a 2nd listener hashtable (port+addr)
2017-12-03 10:18:28 -05:00
net: add helpers checking if socket can be bound to nonlocal address
2018-08-01 09:50:04 -07:00
net-tcp: remove useless tw_timeout field
2018-06-05 10:45:24 -04:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
ip: remove tx_flags from ipcm_cookie and use same logic for v4 and v6
2018-07-07 10:58:49 +09:00
scsi: libcxgbi: fib6_ino reference in rt6_info is rcu protected
2018-09-12 00:08:00 -07:00
net/ipv6: Revert attempt to simplify route replace and append
2018-07-04 15:22:13 +09:00
ip6_gre: add erspan v2 support
2017-12-15 12:34:00 -05:00
net/ipv4: Add helper to return path MTU based on fib result
2018-05-22 10:51:09 +02:00
net: check tunnel option type in tunnel flags
2018-06-29 23:50:26 +09:00
ipvs: add assured state for conn templates
2018-07-18 11:26:40 +02:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
net: don't declare IPv6 non-local bind helper if CONFIG_IPV6 undefined
2018-08-01 13:45:31 -07:00
ipv6: remove dependency of nf_defrag_ipv6 on ipv6 module
2018-07-18 11:26:53 +02:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
net: Spelling s/stucture/structure/
2018-03-27 09:51:23 +02:00
net: Add lag.h, net_lag_port_dev_txable()
2018-07-11 23:10:19 -07:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
llc: avoid blocking in llc_sap_close()
2018-09-13 09:04:58 -07:00
net: LLC: Convert timers to use timer_setup()
2017-10-25 12:06:25 +09:00
llc: delete timers synchronously in llc_sk_free()
2018-04-22 14:55:03 -04:00
net: Move ipv4 set_lwt_redirect helper to lwtunnel
2018-02-14 14:43:32 -05:00
mac80211: add an option for drivers to check if packets can be aggregated
2018-09-05 10:11:50 +02:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
neighbour: support for NTF_EXT_LEARNED flag
2018-04-25 13:19:59 -04:00
net: Introduce net_failover driver
2018-05-28 22:59:54 -04:00
net: create reusable function for getting ownership info of sysfs inodes
2018-07-20 23:44:36 -07:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
net: ipv4: Notify about changes to ip_forward_update_priority
2018-08-01 09:52:30 -07:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
proc: introduce proc_create_seq{,_data}
2018-05-16 07:23:35 +02:00
net: fix rtnh_ok()
2018-04-07 22:32:31 -04:00
openvswitch: enable NSH support
2017-11-08 16:12:33 +09:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
xdp: introduce xdp_return_frame_rx_napi
2018-05-24 18:36:15 -07:00
ipv{4,6}/ping: simplify proc file creation
2018-05-16 07:23:35 +02:00
net_sched: fix unused variable warning in stmmac
2018-08-22 21:40:21 -07:00
net/sched: Add HW offloading capability to ETF
2018-07-04 22:30:27 +09:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
ipv{4,6}/raw: simplify ѕeq_file code
2018-05-16 07:23:35 +02:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
net_sched: red: Avoid illegal values
2017-12-05 14:37:13 -05:00
cfg80211: make wmm_rule part of the reg_rule structure
2018-08-28 11:11:47 +02:00
tcp: socket option to set TCP fast open key
2017-10-20 13:21:36 +01:00
proc: introduce proc_create_seq{,_data}
2018-05-16 07:23:35 +02:00
net/ipv4: Add support for specifying metric of connected routes
2018-05-29 10:12:45 -04:00
Bluetooth: btrsi: add new rsi bluetooth driver
2018-03-13 18:37:02 +02:00
rtnetlink: add rtnl_get_net_ns_capable()
2018-09-05 22:27:11 -07:00
net: sched: cls_flower: dump offload count value
2018-09-10 10:35:15 -07:00
pids: Compute task_tgid using signal->leader_pid
2018-07-21 10:43:12 -05:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
rhashtable: split rhashtable.h
2018-06-22 13:43:27 +09:00
rhashtable: split rhashtable.h
2018-06-22 13:43:27 +09:00
bpf: add End.DT6 action to bpf_lwt_seg6_action helper
2018-07-31 09:22:48 +02:00
slip: Check if rstate is initialized before uncompressing
2018-04-11 10:33:46 -04:00
net/smc: add pnetid support for SMC-D and ISM
2018-06-30 20:42:25 +09:00
net: sock: introduce SOCK_XDP
2018-09-13 09:25:40 -07:00
bpf: Enable BPF_PROG_TYPE_SK_REUSEPORT bpf prog in reuseport selection
2018-08-11 01:58:46 +02:00
net/mac89x0: Convert to platform_driver
2018-03-01 21:21:36 -05:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
strparser: Add __strp_unpause and use it in ktls.
2018-06-06 14:07:53 -04:00
switchdev: Add fdb.added_by_user to switchdev notifications
2018-05-03 13:46:47 -04:00
tcp, ulp: add alias for all ulp modules
2018-08-16 14:58:07 -07:00
tcp: remove the hardcode in the definition of TCPF Macro
2018-02-21 15:06:05 -05:00
flow_dissector: do not rely on implicit casts
2018-05-08 00:02:41 -04:00
net/tls: Add support for async decryption of tls records
2018-09-01 19:52:50 -07:00
ipv6: fold sockcm_cookie into ipcm6_cookie
2018-07-07 10:58:49 +09:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
Merge ra.kernel.org:/pub/scm/linux/kernel/git/davem/net
2018-07-03 10:29:26 +09:00
net: Convert GRO SKB handling to list_head.
2018-06-26 11:33:04 +09:00
udplite: fix partial checksum initialization
2018-02-16 15:57:42 -05:00
vxlan: Remove duplicated include from vxlan.h
2018-09-13 12:07:56 -07:00
lift handling of SIOCIW... out of dev_ioctl()
2018-01-24 19:13:45 -05:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
xdp: export xdp_rxq_info_unreg_mem_model
2018-08-29 12:25:53 -07:00
xsk: i40e: get rid of useless struct xdp_umem_props
2018-09-01 01:38:16 +02:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
2018-08-15 15:04:25 -07:00
fb96194545