summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorAna Rey <anarey@gmail.com>2014-09-02 20:36:58 +0200
committerPablo Neira Ayuso <pablo@netfilter.org>2014-09-03 14:23:20 +0200
commite2342e3f77eeb72ad4e738866be058c466713843 (patch)
treee2275ecde96df5adeda0d7e004fba1f9a935cde5
parent93483364369d8ef10d9e38018da02c6b0eae3077 (diff)
expr: meta: Add devgroup support
The kernel support is add in commit: netfilter: nf_tables: add devgroup support in meta expresion Signed-off-by: Ana Rey <anarey@gmail.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
-rw-r--r--include/linux/netfilter/nf_tables.h4
-rw-r--r--src/expr/meta.c4
2 files changed, 7 insertions, 1 deletions
diff --git a/include/linux/netfilter/nf_tables.h b/include/linux/netfilter/nf_tables.h
index c9b6f00..c000947 100644
--- a/include/linux/netfilter/nf_tables.h
+++ b/include/linux/netfilter/nf_tables.h
@@ -573,6 +573,8 @@ enum nft_exthdr_attributes {
* @NFT_META_BRI_OIFNAME: packet output bridge interface name
* @NFT_META_PKTTYPE: packet type (skb->pkt_type), special handling for loopback
* @NFT_META_CPU: cpu id through smp_processor_id()
+ * @NFT_META_IIFGROUP: packet input interface group
+ * @NFT_META_OIFGROUP: packet output interface group
*/
enum nft_meta_keys {
NFT_META_LEN,
@@ -596,6 +598,8 @@ enum nft_meta_keys {
NFT_META_BRI_OIFNAME,
NFT_META_PKTTYPE,
NFT_META_CPU,
+ NFT_META_IIFGROUP,
+ NFT_META_OIFGROUP,
};
/**
diff --git a/src/expr/meta.c b/src/expr/meta.c
index 9e884d6..5b5159f 100644
--- a/src/expr/meta.c
+++ b/src/expr/meta.c
@@ -23,7 +23,7 @@
#include "expr_ops.h"
#ifndef NFT_META_MAX
-#define NFT_META_MAX (NFT_META_CPU + 1)
+#define NFT_META_MAX (NFT_META_OIFGROUP + 1)
#endif
struct nft_expr_meta {
@@ -155,6 +155,8 @@ static const char *meta_key2str_array[NFT_META_MAX] = {
[NFT_META_BRI_OIFNAME] = "bri_oifname",
[NFT_META_PKTTYPE] = "pkttype",
[NFT_META_CPU] = "cpu",
+ [NFT_META_IIFGROUP] = "iifgroup",
+ [NFT_META_OIFGROUP] = "oifgroup",
};
static const char *meta_key2str(uint8_t key)