Re: xtables2 a8, netlink interface

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, 23 Jan 2012, Jan Engelhardt wrote:

> On Saturday 2012-01-21 21:21, Jozsef Kadlecsik wrote:
> >
> >Netlink makes too easy to add new attributes - and ignores unknown ones. 
> >However, in our case both communicating parties must know the exact 
> >capabilities of the other one: it's unacceptable that say a new flag is 
> >introduced and sent from userspace and got silently discarded by the 
> >(older) kernel.
> 
> I thought about exposing the revision window here, much like
> libtool's CURRENT and (CURRENT-AGE), rather than just a single rev
> like ipset currently does. Does that make sense to you?
> 
> 1. kern: 600--611, prog:    , 599 => prog too old
> 2. kern: 600--611, prog: 600, 610 => can use some/all features
> 3. kern: 600--611, prog: 611      => can use all features
> 4. kern: 600--611, prog: 612,     => kernel too old

That's perfect (ipset does the same, just it doesn't send a version range 
when the window size is zero).

Best regards,
Jozsef
-
E-mail  : kadlec@xxxxxxxxxxxxxxxxx, kadlecsik.jozsef@xxxxxxxxxxxxx
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : Wigner Research Centre for Physics, Hungarian Academy of Sciences
          H-1525 Budapest 114, POB. 49, Hungary
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux