linux.git/net/decnet/netfilter, branch v2.6.23

[NETLINK]: Switch cb_lock spinlock to mutex and allow to override it

2007-04-26T05:29:03+00:00

Switch cb_lock to mutex and allow netlink kernel users to override it
with a subsystem specific mutex for consistent locking in dump callbacks.
All netlink_dump_start users have been audited not to rely on any
side-effects of the previously used spinlock.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[SK_BUFF]: Some more conversions to skb_copy_from_linear_data

2007-04-26T05:28:30+00:00

Signed-off-by: Arnaldo Carvalho de Melo

[NETLINK]: Introduce nlmsg_hdr() helper

2007-04-26T05:26:34+00:00

For the common "(struct nlmsghdr *)skb->data" sequence, so that we reduce the
number of direct accesses to skb->data and for consistency with all the other
cast skb member helpers.

Signed-off-by: Arnaldo Carvalho de Melo 
Signed-off-by: David S. Miller

[SK_BUFF]: Convert skb->tail to sk_buff_data_t

2007-04-26T05:26:28+00:00

So that it is also an offset from skb->head, reduces its size from 8 to 4 bytes
on 64bit architectures, allowing us to combine the 4 bytes hole left by the
layer headers conversion, reducing struct sk_buff size to 256 bytes, i.e. 4
64byte cachelines, and since the sk_buff slab cache is SLAB_HWCACHE_ALIGN...
:-)

Many calculations that previously required that skb->{transport,network,
mac}_header be first converted to a pointer now can be done directly, being
meaningful as offsets or pointers.

Signed-off-by: Arnaldo Carvalho de Melo 
Signed-off-by: David S. Miller

[NET] DECNET: Fix whitespace errors.

2007-02-11T07:19:29+00:00

Signed-off-by: YOSHIFUJI Hideaki 
Signed-off-by: David S. Miller

[NETLINK]: Encapsulate eff_cap usage within security framework.

2006-06-29T23:57:55+00:00

This patch encapsulates the usage of eff_cap (in netlink_skb_params) within
the security framework by extending security_netlink_recv to include a required
capability parameter and converting all direct usage of eff_caps outside
of the lsm modules to use the interface.  It also updates the SELinux
implementation of the security_netlink_send and security_netlink_recv
hooks to take advantage of the sid in the netlink_skb_params struct.
This also enables SELinux to perform auditing of netlink capability checks.
Please apply, for 2.6.18 if possible.

Signed-off-by: Darrel Goeddel 
Signed-off-by: Stephen Smalley 
Acked-by:  James Morris 
Signed-off-by: David S. Miller

[NETFILTER]: Rename init functions.

2006-03-29T01:02:48+00:00

Every netfilter module uses `init' for its module_init() function and
`fini' or `cleanup' for its module_exit() function.

Problem is, this creates uninformative initcall_debug output and makes
ctags rather useless.

So go through and rename them all to $(filename)_init and
$(filename)_fini.

Signed-off-by: Andrew Morton 
Signed-off-by: David S. Miller

netfilter: headers included twice

2006-01-11T01:04:35+00:00

Headers included twice.

Signed-off-by: Nicolas Kaiser 
Signed-off-by: Adrian Bunk

[DECNET]: Fix build after netlink changes.

2005-08-29T23:01:20+00:00

Signed-off-by: Andrew Morton 
Signed-off-by: David S. Miller

[NETLINK]: Add "groups" argument to netlink_kernel_create

2005-08-29T23:01:11+00:00

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller