On Tue, Feb 18, 2014 at 10:27:24AM +0100, Florian Westphal wrote: > Takes advantage of the fact that the current maximum label storage area > is 128 bits, i.e. the dynamically allocated extension area in the > kernel will always fit into a nft register. > > Currently this re-uses rt_symbol_table_init() to read connlabel.conf. > This works since the format is pretty much the same. > > Signed-off-by: Florian Westphal <fw@xxxxxxxxx> > --- > Changes since RFC: > - print function should only output one single label > - use singular ('label', not 'labels') > - use extra __init function to init label symtable Looks very good to me. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html