Am 31.01.2011 23:52, schrieb Jozsef Kadlecsik: > Hi, > > Here follows the updated ipset kernel patches. The list of changes compared > to the previous one: > > - Separate ipset errnos completely from system ones and bump protocol > version > - Use better error codes in xt_set.c > - Fix sparse warning about shadowed definition > - bitmap:ip type: flavour specific adt functions > - bitmap:port type: flavour specific adt functions > - Move the type specificic attribute validation to the core > - Use vzalloc() instead of __vmalloc() > - Use meaningful error messages in xt_set.c > - Constified attribute cannot be written > - Send (N)ACK at dumping only when NLM_F_ACK is set > - Correct the error codes: use ENOENT and EMSGSIZE A few more issues I just noticed: - There are still a bunch of purely kernel internal files in include/linux/netfilter/ipset which should be moved to include/net/netfilter/ipset. - Some other include files contain mostly kernel internal things, I'd prefer to split those and move the kernel internal portions to include/net/netfilter/ipvs as well. - The headers are not installed. I'm currently adding proper Kbuild entries, will send over for review in a few minutes. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html