aboutsummaryrefslogtreecommitdiffstats
path: root/net/netfilter/nft_meta.c
AgeCommit message (Expand)AuthorFilesLines
2023-11-14netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()Dan Carpenter1-1/+1
2023-08-22netfilter: nft_meta: refactor deprecated strncpyJustin Stitt1-3/+3
2023-06-26netfilter: nf_tables: limit allowed range via nla_policyFlorian Westphal1-1/+1
2022-11-15netfilter: nf_tables: Extend nft_expr_ops::dump callback parametersPhil Sutter1-2/+3
2022-10-25netfilter: nft_meta: add inner match supportPablo Neira Ayuso1-0/+62
2022-06-08netfilter: use get_random_u32 instead of prandomFlorian Westphal1-11/+2
2022-03-20netfilter: nft_meta: extend reduce support to bridge familyFlorian Westphal1-2/+3
2022-03-20netfilter: nf_tables: cancel tracking for clobbered destination registersPablo Neira Ayuso1-8/+6
2022-01-09netfilter: nft_meta: cancel register tracking after meta updatePablo Neira Ayuso1-0/+20
2022-01-09netfilter: nft_bitwise: track register operationsPablo Neira Ayuso1-1/+1
2022-01-09netfilter: nft_meta: track register operationsPablo Neira Ayuso1-0/+28
2021-11-01netfilter: nf_tables: convert pktinfo->tprot_set to flags fieldPablo Neira Ayuso1-1/+1
2021-11-01netfilter: nft_meta: add NFT_META_IFTYPEPablo Neira Ayuso1-1/+5
2021-01-27netfilter: nftables: add nft_parse_register_store() and use itPablo Neira Ayuso1-3/+2
2021-01-27netfilter: nftables: add nft_parse_register_load() and use itPablo Neira Ayuso1-2/+1
2020-11-27netfilter: nftables_offload: build mask based from the matching bytesPablo Neira Ayuso1-8/+8
2020-09-08netfilter: nft_meta: use socket user_ns to retrieve skuid and skgidPablo Neira Ayuso1-2/+2
2020-08-02netfilter: nft_meta: fix iifgroup matchingFlorian Westphal1-1/+1
2019-12-26netfilter: nft_meta: add support for slave device ifindex matchingFlorian Westphal1-7/+69
2019-12-26netfilter: nft_meta: place rtclassid handling in a helperFlorian Westphal1-6/+16
2019-12-26netfilter: nft_meta: place prandom handling in a helperFlorian Westphal1-4/+9
2019-12-26netfilter: nft_meta: move all interface related keys to helperFlorian Westphal1-25/+70
2019-12-26netfilter: nft_meta: move interface kind handling to helperFlorian Westphal1-6/+25
2019-12-26netfilter: nft_meta: move cgroup handling to helperFlorian Westphal1-5/+15
2019-12-26netfilter: nft_meta: move sk uid/git handling to helperFlorian Westphal1-29/+36
2019-12-26netfilter: nft_meta: move pkttype handling to helperFlorian Westphal1-39/+51
2019-12-26netfilter: nft_meta: move time handling to helperFlorian Westphal1-6/+22
2019-11-20netfilter: nf_tables_offload: allow ethernet interface type onlyPablo Neira Ayuso1-0/+4
2019-11-15netfilter: nft_meta: use 64-bit time arithmeticArnd Bergmann1-5/+5
2019-11-13netfilter: nft_meta: offload support for interface indexPablo Neira Ayuso1-0/+4
2019-08-26netfilter: nft_meta: support for time matchingAnder Juaristi1-0/+46
2019-07-25netfilter: nf_tables: Make nft_meta expression more robustPhil Sutter1-12/+4
2019-07-19netfilter: bridge: make NF_TABLES_BRIDGE tristateArnd Bergmann1-1/+1
2019-07-18netfilter: nft_meta: skip EAGAIN if nft_meta_bridge is not a modulePablo Neira Ayuso1-1/+1
2019-07-09netfilter: nf_tables: add hardware offload supportPablo Neira Ayuso1-0/+27
2019-07-06netfilter: nf_tables: force module load in case select_ops() returns -EAGAINPablo Neira Ayuso1-0/+4
2019-07-05netfilter: nft_meta: move bridge meta keys into nft_meta_bridgewenxu1-53/+28
2019-06-19treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500Thomas Gleixner1-4/+1
2019-01-18netfilter: nft_meta: Add NFT_META_I/OIFKIND meta typewenxu1-0/+12
2018-12-19net: move secpath_exist helper to sk_buff.hFlorian Westphal1-1/+1
2018-09-28netfilter: nf_tables: add requirements for connsecmark supportChristian Göttsche1-0/+8
2018-09-28netfilter: nf_tables: add SECMARK supportChristian Göttsche1-0/+108
2018-07-30netfilter: nf_tables: handle meta/lookup with direct callFlorian Westphal1-3/+3
2018-06-28netfilter: check if the socket netns is correct.Flavio Leitner1-3/+6
2018-06-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-6/+8
2018-05-23netfilter: nft_meta: fix wrong value dereference in nft_meta_set_evalTaehee Yoo1-6/+8
2018-04-27netfilter: nf_tables: make meta expression builtinFlorian Westphal1-21/+1
2018-04-24netfilter: merge meta_bridge into nft_metaFlorian Westphal1-32/+58
2018-01-10netfilter: nf_tables: add single table list for all familiesPablo Neira Ayuso1-2/+2
2018-01-08netfilter: meta: secpath supportFlorian Westphal1-0/+43
2017-04-07netfilter: Remove exceptional & on function nameArushi Singhal1-1/+1
2017-03-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-19/+21
2017-03-13netfilter: nf_tables: fix mismatch in big-endian systemLiping Zhang1-19/+21
2017-03-06netfilter: nf_tables: validate the expr explicitly after init successfullyLiping Zhang1-4/+0
2017-01-18netfilter: nft_meta: deal with PACKET_LOOPBACK in netdev familyLiping Zhang1-1/+27
2017-01-18netfilter: pkttype: unnecessary to check ipv6 multicast addressLiping Zhang1-4/+1
2016-11-03netfilter: nf_tables: use hook state from xt_action_param structurePablo Neira Ayuso1-3/+3
2016-10-26netfilter: nft_meta: permit pkttype mangling in ip/ip6 preroutingLiping Zhang1-0/+5
2016-09-25Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/...Pablo Neira Ayuso1-4/+13
2016-09-12netfilter: nf_tables: ensure proper initialization of nft_pktinfo fieldsPablo Neira Ayuso1-0/+2
2016-08-25netfilter: nft_meta: improve the validity check of pkttype set exprLiping Zhang1-4/+13
2016-07-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-1/+1
2016-07-04net: simplify and make pkt_type_ok() available for other usersJamal Hadi Salim1-8/+1
2016-06-23netfilter: nft_meta: set skb->nf_trace appropriatelyLiping Zhang1-1/+1
2016-02-29netfilter: meta: add PRANDOM supportFlorian Westphal1-0/+11
2015-12-18netfilter: meta: add support for setting skb->pkttypeFlorian Westphal1-0/+38
2015-12-14Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/...Pablo Neira Ayuso1-1/+1
2015-12-09netfilter: nf_tables: wrap tracing with a static keyFlorian Westphal1-0/+16
2015-12-08net: wrap sock->sk_cgrp_prioidx and ->sk_classid inside a structTejun Heo1-1/+1
2015-11-08netfilter: nft_meta: use skb_to_full_sk() helperEric Dumazet1-16/+20
2015-09-18netfilter: nf_tables: kill nft_pktinfo.opsEric W. Biederman1-2/+2
2015-07-21net: #ifdefify sk_classid member of struct sockMathias Krause1-0/+4
2015-04-13netfilter: nf_tables: switch registers to 32 bit addressingPatrick McHardy1-2/+5
2015-04-13netfilter: nf_tables: add register parsing/dumping helpersPatrick McHardy1-4/+4
2015-04-13netfilter: nf_tables: convert expressions to u32 register pointersPatrick McHardy1-28/+26
2015-04-13netfilter: nf_tables: get rid of NFT_REG_VERDICT usagePatrick McHardy1-5/+5
2015-04-13netfilter: nf_tables: introduce nft_validate_register_load()Patrick McHardy1-1/+5
2015-04-13netfilter: nf_tables: kill nft_validate_output_register()Patrick McHardy1-11/+2
2015-04-13netfilter: nf_tables: rename nft_validate_data_load()Patrick McHardy1-2/+2
2015-04-13netfilter: nf_tables: validate len in nft_validate_data_load()Patrick McHardy1-6/+13
2015-04-01netfilter: nft_meta: fix cgroup matchingPablo Neira Ayuso1-3/+2
2015-03-25netfilter: nft_meta: use raw_smp_processor_id()Patrick McHardy1-1/+1
2015-03-17netfilter: use sk_fullsock() helperEric Dumazet1-2/+2
2014-11-09netfilter: nft_meta: add cgroup supportAna Rey1-0/+7
2014-09-09netfilter: nf_tables: add devgroup support in meta expresionAna Rey1-0/+12
2014-08-24netfilter: nft_meta: Add cpu attribute supportAna Rey1-0/+5
2014-08-24netfilter: nft_meta: add pkttype supportAna Rey1-0/+28
2014-04-23netfilter: nf_tables: Make meta expression core functions publicTomasz Bursztyka1-25/+25
2014-04-02netfilter: nft_meta: split nft_meta_init() into two functions for get/setPatrick McHardy1-35/+30
2014-02-14netfilter: nft_meta: fix typo "CONFIG_NET_CLS_ROUTE"Paul Bolle1-2/+2
2014-01-09netfilter: nft_meta: fix lack of validation of the input registerPablo Neira Ayuso1-0/+3
2014-01-07netfilter: nft_meta: add l4proto supportPatrick McHardy1-0/+4
2014-01-07netfilter: nf_tables: add nfproto support to meta expressionPatrick McHardy1-0/+4
2013-12-28netfilter: nf_tables: nft_meta module get/set opsArturo Borrero Gonzalez1-23/+123
2013-10-14netfilter: nf_tables: expression ops overloadingPatrick McHardy1-6/+12
2013-10-14netfilter: add nftablesPatrick McHardy1-0/+222