summaryrefslogtreecommitdiffstats
path: root/include/linux/netfilter
diff options
context:
space:
mode:
authorPhil Sutter <phil@nwl.cc>2021-04-29 15:28:59 +0200
committerPhil Sutter <phil@nwl.cc>2021-05-04 00:09:45 +0200
commit616800af0da86d151cb695f1376d5ec6ede6fa72 (patch)
tree1c5db781b8d7e723422c6e9be8c558cef5adb03c /include/linux/netfilter
parent1e984079817a3c804eae25dea937d63d18c57a6c (diff)
extensions: SECMARK: Implement revision 1
The changed data structure for communication with kernel allows to exclude the field 'secid' which is populated on kernel side. Thus this fixes the formerly always failing extension comparison breaking rule check and rule delete by content. Signed-off-by: Phil Sutter <phil@nwl.cc>
Diffstat (limited to 'include/linux/netfilter')
-rw-r--r--include/linux/netfilter/xt_SECMARK.h6
1 files changed, 6 insertions, 0 deletions
diff --git a/include/linux/netfilter/xt_SECMARK.h b/include/linux/netfilter/xt_SECMARK.h
index 989092bd..31760a28 100644
--- a/include/linux/netfilter/xt_SECMARK.h
+++ b/include/linux/netfilter/xt_SECMARK.h
@@ -19,4 +19,10 @@ struct xt_secmark_target_info {
char secctx[SECMARK_SECCTX_MAX];
};
+struct xt_secmark_target_info_v1 {
+ __u8 mode;
+ char secctx[SECMARK_SECCTX_MAX];
+ __u32 secid;
+};
+
#endif /*_XT_SECMARK_H_target */