linux.git/net/netfilter/nfnetlink_queue.c, branch v2.6.24

[NETFILTER]: Avoid skb_copy/pskb_copy/skb_realloc_headroom

2007-10-15T19:26:28+00:00

This patch replaces unnecessary uses of skb_copy, pskb_copy and
skb_realloc_headroom by functions such as skb_make_writable and
pskb_expand_head.

This allows us to remove the double pointers later.

Signed-off-by: Herbert Xu 
Signed-off-by: David S. Miller

[NETFILTER]: Do not copy skb in skb_make_writable

2007-10-15T19:26:27+00:00

Now that all callers of netfilter can guarantee that the skb is not shared,
we no longer have to copy the skb in skb_make_writable.

Signed-off-by: Herbert Xu 
Signed-off-by: David S. Miller

[NETFILTER]: Make netfilter code use the seq_open_private

2007-10-10T23:55:34+00:00

Just switch to the consolidated calls.

ipt_recent() has to initialize the private, so use
the __seq_open_private() helper.

Signed-off-by: Pavel Emelyanov 
Signed-off-by: David S. Miller

[NETFILTER]: nfnetlink_queue: use netlink policy

2007-10-10T23:53:34+00:00

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: nfnetlink: rename functions containing 'nfattr'

2007-10-10T23:53:32+00:00

There is no struct nfattr anymore, rename functions to 'nlattr'.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: nfnetlink: convert to generic netlink attribute functions

2007-10-10T23:53:31+00:00

Get rid of the duplicated rtnetlink macros and use the generic netlink
attribute functions. The old duplicated stuff is moved to a new header
file that exists just for userspace.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: nfnetlink: make subsystem and callbacks const

2007-10-10T23:53:30+00:00

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NET]: Wrap hard_header_parse

2007-10-10T23:52:51+00:00

Wrap the hard_header_parse function to simplify next step of
header_ops conversion.

Signed-off-by: Stephen Hemminger 
Signed-off-by: David S. Miller

[NET]: Support multiple network namespaces with netlink

2007-10-10T23:49:09+00:00

Each netlink socket will live in exactly one network namespace,
this includes the controlling kernel sockets.

This patch updates all of the existing netlink protocols
to only support the initial network namespace.  Request
by clients in other namespaces will get -ECONREFUSED.
As they would if the kernel did not have the support for
that netlink protocol compiled in.

As each netlink protocol is updated to be multiple network
namespace safe it can register multiple kernel sockets
to acquire a presence in the rest of the network namespaces.

The implementation in af_netlink is a simple filter implementation
at hash table insertion and hash table look up time.

Signed-off-by: Eric W. Biederman 
Signed-off-by: David S. Miller

[NET]: Make device event notification network namespace safe

2007-10-10T23:49:09+00:00

Every user of the network device notifiers is either a protocol
stack or a pseudo device.  If a protocol stack that does not have
support for multiple network namespaces receives an event for a
device that is not in the initial network namespace it quite possibly
can get confused and do the wrong thing.

To avoid problems until all of the protocol stacks are converted
this patch modifies all netdev event handlers to ignore events on
devices that are not in the initial network namespace.

As the rest of the code is made network namespace aware these
checks can be removed.

Signed-off-by: Eric W. Biederman 
Signed-off-by: David S. Miller