diff options
author | Florian Westphal <fw@strlen.de> | 2016-09-21 18:35:01 +0300 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2016-09-24 22:25:48 +0300 |
commit | c5136b15ea364124299c8a9ba96b300e96061e3a (patch) | |
tree | c5ffa93a950d60bdc5bc0690743c5bc806cd0904 /tools/lguest | |
parent | 50f4c7b73f831a53fa9ddeb9bdf4cfb5b23d3aa7 (diff) | |
download | linux-c5136b15ea364124299c8a9ba96b300e96061e3a.tar.xz |
netfilter: bridge: add and use br_nf_hook_thresh
This replaces the last uses of NF_HOOK_THRESH().
Followup patch will remove it and rename nf_hook_thresh.
The reason is that inet (non-bridge) netfilter no longer invokes the
hooks from hooks, so we do no longer need the thresh value to skip hooks
with a lower priority.
The bridge netfilter however may need to do this. br_nf_hook_thresh is a
wrapper that is supposed to do this, i.e. only call hooks with a
priority that exceeds NF_BR_PRI_BRNF.
It's used only in the recursion cases of br_netfilter. It invokes
nf_hook_slow while holding an rcu read-side critical section to make a
future cleanup simpler.
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Aaron Conole <aconole@bytheb.org>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'tools/lguest')
0 files changed, 0 insertions, 0 deletions