]> git.karo-electronics.de Git - karo-tx-linux.git/commit
netfilter: ipset: Introduce new operation to get both setname and family
authorJozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Mon, 30 Sep 2013 05:57:18 +0000 (07:57 +0200)
committerJozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Mon, 30 Sep 2013 19:33:26 +0000 (21:33 +0200)
commit5e04c0c38c90f1f11a0e87800e4c22d4aba1d733
tree8b8f3229e3934a0c0ff49ba12ea59899d944fe55
parentbd3129fc5e8868df74ffa803c7fec527976bbf1c
netfilter: ipset: Introduce new operation to get both setname and family

ip[6]tables set match and SET target need to know the family of the set
in order to reject adding rules which refer to a set with a non-mathcing
family. Currently such rules are silently accepted and then ignored
instead of generating a clear error message to the user, which is not
helpful.

Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
include/uapi/linux/netfilter/ipset/ip_set.h
net/netfilter/ipset/ip_set_core.c