On Mon, Jan 21, 2013 at 12:42:20PM +0100, Florian Westphal wrote: > Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> wrote: > > On Mon, Jan 21, 2013 at 12:28:38PM +0100, Pablo Neira Ayuso wrote: > > > Hi Willem, > > > > > > I have applied this patch to my nf-next tree with minor changes. > > [..] > > > diff --git a/include/uapi/linux/netfilter/Kbuild b/include/uapi/linux/netfilter/Kbuild > > index 08f555f..8b4bd36 100644 > > --- a/include/uapi/linux/netfilter/Kbuild > > +++ b/include/uapi/linux/netfilter/Kbuild > > @@ -35,6 +35,7 @@ header-y += xt_TCPOPTSTRIP.h > > header-y += xt_TEE.h > > header-y += xt_TPROXY.h > > header-y += xt_addrtype.h > > +header-y += xt_bpf.h > > Good catch. I forgot about that too, so xt_connlabel.h is also missing. Patch attached, thanks for spotting this.
>From 7a95ad28c40fec445b0e1463fd8ed638701ad94d Mon Sep 17 00:00:00 2001 From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> Date: Mon, 21 Jan 2013 13:02:19 +0100 Subject: [PATCH] netfilter: add missing xt_connlabel.h header in installation Reported-by: Florian Westphal <fw@xxxxxxxxx> Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> --- include/uapi/linux/netfilter/Kbuild | 1 + 1 file changed, 1 insertion(+) diff --git a/include/uapi/linux/netfilter/Kbuild b/include/uapi/linux/netfilter/Kbuild index 8b4bd36..4111577 100644 --- a/include/uapi/linux/netfilter/Kbuild +++ b/include/uapi/linux/netfilter/Kbuild @@ -39,6 +39,7 @@ header-y += xt_bpf.h header-y += xt_cluster.h header-y += xt_comment.h header-y += xt_connbytes.h +header-y += xt_connlabel.h header-y += xt_connlimit.h header-y += xt_connmark.h header-y += xt_conntrack.h -- 1.7.10.4