summaryrefslogtreecommitdiff
path: root/net/netfilter/nf_tables_api.c
AgeCommit message (Expand)AuthorFilesLines
2024-09-26netfilter: nf_tables: missing objects with no memcg accountingPablo Neira Ayuso1-1/+1
2024-09-26netfilter: nf_tables: use rcu chain hook list iterator from netlink dump pathPablo Neira Ayuso1-1/+1
2024-09-26netfilter: nf_tables: Keep deleted flowtable hooks until after RCUPhil Sutter1-1/+1
2024-09-03netfilter: nf_tables: set element timeout update supportPablo Neira Ayuso1-4/+43
2024-09-03netfilter: nf_tables: zero timeout means element never times outPablo Neira Ayuso1-16/+23
2024-09-03netfilter: nf_tables: consolidate timeout extension for elementsPablo Neira Ayuso1-26/+17
2024-09-03netfilter: nf_tables: annotate data-races around element expirationPablo Neira Ayuso1-1/+1
2024-09-03netfilter: nf_tables: remove annotation to access set timeout while holding lockPablo Neira Ayuso1-2/+2
2024-09-03netfilter: nf_tables: reject expiration higher than timeoutPablo Neira Ayuso1-0/+3
2024-09-03netfilter: nf_tables: reject element expiration with no timeoutPablo Neira Ayuso1-0/+3
2024-09-03netfilter: nf_tables: elements with timeout below CONFIG_HZ never expirePablo Neira Ayuso1-1/+1
2024-09-03netfilter: nf_tables: drop unused 3rd argument from validate callback opsFlorian Westphal1-2/+1
2024-08-20netfilter: nf_tables: allow loads only when register is initializedFlorian Westphal1-4/+34
2024-08-20netfilter: nf_tables: pass context structure to nft_parse_register_loadFlorian Westphal1-1/+2
2024-08-19netfilter: nf_tables: do not remove elements if set backend implements .abortPablo Neira Ayuso1-1/+4
2024-08-19netfilter: nf_tables: store new sets in dedicated listFlorian Westphal1-9/+20
2024-08-15netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requestsPhil Sutter1-13/+59
2024-08-15netfilter: nf_tables: Introduce nf_tables_getobj_singlePhil Sutter1-31/+44
2024-08-15netfilter: nf_tables: Audit log dump reset after the factPhil Sutter1-15/+13
2024-07-11Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-145/+13
2024-07-11netfilter: nf_tables: prefer nft_chain_validateFlorian Westphal1-145/+13
2024-07-05Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-2/+1
2024-07-04netfilter: nf_tables: unconditionally flush pending work before notifierFlorian Westphal1-2/+1
2024-07-01Merge tag 'nf-next-24-06-28' of git://git.kernel.org/pub/scm/linux/kernel/git...David S. Miller1-167/+244
2024-06-27netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registersPablo Neira Ayuso1-4/+4
2024-06-25netfilter: nf_tables: do not store nft_ctx in transaction objectsFlorian Westphal1-58/+82
2024-06-25netfilter: nf_tables: pass nft_table to destroy functionFlorian Westphal1-9/+9
2024-06-25netfilter: nf_tables: reduce trans->ctx.chain referencesFlorian Westphal1-9/+7
2024-06-25netfilter: nf_tables: store chain pointer in rule transactionFlorian Westphal1-10/+11
2024-06-25netfilter: nf_tables: avoid usage of embedded nft_ctxFlorian Westphal1-5/+5
2024-06-25netfilter: nf_tables: pass more specific nft_trans_chain where possibleFlorian Westphal1-25/+26
2024-06-25netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctxFlorian Westphal1-9/+8
2024-06-25netfilter: nf_tables: reduce trans->ctx.table referencesFlorian Westphal1-38/+41
2024-06-25netfilter: nf_tables: move bind list_head into relevant subtypesFlorian Westphal1-14/+57
2024-06-25netfilter: nf_tables: make struct nft_trans first member of derived subtypesFlorian Westphal1-5/+13
2024-05-10netfilter: nf_tables: allow clone callbacks to sleepFlorian Westphal1-4/+4
2024-05-06netfilter: nf_tables: skip transaction if update object is not implementedPablo Neira Ayuso1-2/+6
2024-04-18netfilter: nf_tables: fix memleak in map from abort pathPablo Neira Ayuso1-2/+14
2024-04-17netfilter: nf_tables: restore set elements when delete set failsPablo Neira Ayuso1-4/+40
2024-04-11netfilter: nft_set_pipapo: walk over current view on netlink dumpPablo Neira Ayuso1-0/+6
2024-04-11netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()Ziyang Xuan1-2/+6
2024-04-11netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()Ziyang Xuan1-2/+6
2024-04-04netfilter: nf_tables: discard table flag update with pending basechain deletionPablo Neira Ayuso1-4/+5
2024-04-04netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()Ziyang Xuan1-2/+7
2024-04-04netfilter: nf_tables: reject new basechain after table flag updatePablo Neira Ayuso1-0/+3
2024-04-04netfilter: nf_tables: flush pending destroy work before exit_net releasePablo Neira Ayuso1-0/+1
2024-04-04netfilter: nf_tables: release mutex after nft_gc_seq_end from abort pathPablo Neira Ayuso1-5/+8
2024-04-04netfilter: nf_tables: release batch on table validation from abort pathPablo Neira Ayuso1-5/+10
2024-03-28netfilter: nf_tables: skip netdev hook unregistration if table is dormantPablo Neira Ayuso1-6/+10
2024-03-28netfilter: nf_tables: reject table flag and netdev basechain updatesPablo Neira Ayuso1-1/+30