On Saturday 2012-01-21 21:21, Jozsef Kadlecsik wrote: > >Netlink makes too easy to add new attributes - and ignores unknown ones. >However, in our case both communicating parties must know the exact >capabilities of the other one: it's unacceptable that say a new flag is >introduced and sent from userspace and got silently discarded by the >(older) kernel. I thought about exposing the revision window here, much like libtool's CURRENT and (CURRENT-AGE), rather than just a single rev like ipset currently does. Does that make sense to you? 1. kern: 600--611, prog: , 599 => prog too old 2. kern: 600--611, prog: 600, 610 => can use some/all features 3. kern: 600--611, prog: 611 => can use all features 4. kern: 600--611, prog: 612, => kernel too old -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html