git.stricted.de - GitHub/LineageOS/android_kernel_motorola

projects / GitHub / LineageOS / android_kernel_motorola_exynos9610.git / commit

author	Pablo Neira Ayuso <pablo@netfilter.org>
	Fri, 23 Sep 2016 13:23:33 +0000 (15:23 +0200)
committer	Pablo Neira Ayuso <pablo@netfilter.org>
	Sun, 25 Sep 2016 21:16:42 +0000 (23:16 +0200)
commit	0f3cd9b3697708c86a825ae3cedabf7be6fd3e72
tree	14b59bebf1a6dc16a961864a93febfbacc4d3715	tree \| snapshot (tar.gz zip)
parent	7a682575ad4829b4de3e672a6ad5f73a05826b82	commit \| diff

netfilter: nf_tables: add range expression

Inverse ranges != [a,b] are not currently possible because rules are
composites of && operations, and we need to express this:

data < a || data > b

This patch adds a new range expression. Positive ranges can be already
through two cmp expressions:

cmp(sreg, data, >=)
cmp(sreg, data, <=)

This new range expression provides an alternative way to express this.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

include/net/netfilter/nf_tables_core.h		diff \| blob \| blame \| history
include/uapi/linux/netfilter/nf_tables.h		diff \| blob \| blame \| history
net/netfilter/Makefile		diff \| blob \| blame \| history
net/netfilter/nf_tables_core.c		diff \| blob \| blame \| history
net/netfilter/nft_range.c	[new file with mode: 0644]	blob

RSS Atom