diff options
author | Phil Sutter <phil@nwl.cc> | 2021-04-29 15:28:59 +0200 |
---|---|---|
committer | Phil Sutter <phil@nwl.cc> | 2021-05-04 00:09:45 +0200 |
commit | 616800af0da86d151cb695f1376d5ec6ede6fa72 (patch) | |
tree | 1c5db781b8d7e723422c6e9be8c558cef5adb03c /include | |
parent | 1e984079817a3c804eae25dea937d63d18c57a6c (diff) |
extensions: SECMARK: Implement revision 1
The changed data structure for communication with kernel allows to
exclude the field 'secid' which is populated on kernel side. Thus
this fixes the formerly always failing extension comparison breaking
rule check and rule delete by content.
Signed-off-by: Phil Sutter <phil@nwl.cc>
Diffstat (limited to 'include')
-rw-r--r-- | include/linux/netfilter/xt_SECMARK.h | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/include/linux/netfilter/xt_SECMARK.h b/include/linux/netfilter/xt_SECMARK.h index 989092bd..31760a28 100644 --- a/include/linux/netfilter/xt_SECMARK.h +++ b/include/linux/netfilter/xt_SECMARK.h @@ -19,4 +19,10 @@ struct xt_secmark_target_info { char secctx[SECMARK_SECCTX_MAX]; }; +struct xt_secmark_target_info_v1 { + __u8 mode; + char secctx[SECMARK_SECCTX_MAX]; + __u32 secid; +}; + #endif /*_XT_SECMARK_H_target */ |