linux.git/net/netfilter/nfnetlink_queue.c, branch v2.6.15

[NETFILTER] nfnetlink: unconditionally require CAP_NET_ADMIN

2005-11-14T23:24:59+00:00

This patch unconditionally requires CAP_NET_ADMIN for all nfnetlink
messages.  It also removes the per-message cap_required field, since all
existing subsystems use CAP_NET_ADMIN for all their messages anyway.

Patrick McHardy owes me a beer if we ever need to re-introduce this.

Signed-off-by: Harald Welte 
Signed-off-by: David S. Miller

[NETFILTER] nfnetlink: Use kzalloc

2005-11-05T18:35:27+00:00

These is a cleanup patch, kzalloc can be used in a couple of cases

Signed-off-by: Samir Bellabes 
Signed-off-by: Harald Welte 
Signed-off-by: Arnaldo Carvalho de Melo

[NET]: Fix packet timestamping.

2005-10-03T20:57:23+00:00

I've found the problem in general.  It affects any 64-bit
architecture.  The problem occurs when you change the system time.

Suppose that when you boot your system clock is forward by a day.
This gets recorded down in skb_tv_base.  You then wind the clock back
by a day.  From that point onwards the offset will be negative which
essentially overflows the 32-bit variables they're stored in.

In fact, why don't we just store the real time stamp in those 32-bit
variables? After all, we're not going to overflow for quite a while
yet.

When we do overflow, we'll need a better solution of course.

Signed-off-by: Herbert Xu 
Signed-off-by: David S. Miller

[NETFILTER]: Fix HW checksum handling in nfnetlink_queue

2005-09-06T22:10:00+00:00

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER] remove bogus hand-coded htonll() from nenetlink_queue

2005-09-06T01:09:08+00:00

htonll() is nothing else than cpu_to_be64(), so we'd rather call the
latter.

Signed-off-by: Harald Welte 
Signed-off-by: David S. Miller

[NETFILTER]: net/netfilter/nfnetlink*: make functions static

2005-09-06T01:06:45+00:00

This patch makes needlessly global functions static.

Signed-off-by: Adrian Bunk 
Signed-off-by: David S. Miller

[NET]: Store skb->timestamp as offset to a base timestamp

2005-08-29T22:58:24+00:00

Reduces skb size by 8 bytes on 64-bit.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: add /proc/net/netfilter interface to nf_queue

2005-08-29T22:51:18+00:00

This patch adds a /proc/net/netfilter/nf_queue file, similar to the
recently-added /proc/net/netfilter/nf_log.  It indicates which queue
handler is registered to which protocol family.  This is useful since
there are now multiple queue handlers in the treee (ip[6]_queue,
nfnetlink_queue).

Signed-off-by: Harald Welte 
Signed-off-by: David S. Miller

[NETFILTER]: add correct bridging support to nfnetlink_{queue,log}

2005-08-29T22:51:15+00:00

This patch adds support for passing the real 'physical' device ifindex
down to userspace via nfnetlink_log and nfnetlink_queue.

This feature basically obsoletes net/bridge/netfilter/ebt_ulog.c, and
it is likely ebt_ulog.c will die with one of the next couple of
patches.

Signed-off-by: Harald Welte 
Signed-off-by: David S. Miller

[NETFILTER]: attribute count is an attribute of message type, not subsytem

2005-08-29T22:39:14+00:00

Prior to this patch, every nfnetlink subsystem had to specify it's
attribute count.  However, in reality the attribute count depends on
the message type within the subsystem, not the subsystem itself.  This
patch moves 'attr_count' from 'struct nfnetlink_subsys' into
nfnl_callback to fix this.

Signed-off-by: Harald Welte 
Signed-off-by: David S. Miller