[PATCH iptables] xtables-compat: remove unused fields from bridge and arp families

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



These two families only work under nft compat, so leave unset the fields
that we don't use. Basically, we need neither the module autoload code
nor the native get/setsockopt() revision infrastructure since we use the
one that nft_compat provides through nfnetlink.

Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
---
 libxtables/xtables.c |   13 +++----------
 1 file changed, 3 insertions(+), 10 deletions(-)

diff --git a/libxtables/xtables.c b/libxtables/xtables.c
index 0200c7a..9df12ce 100644
--- a/libxtables/xtables.c
+++ b/libxtables/xtables.c
@@ -168,24 +168,17 @@ static const struct xtables_afinfo afinfo_ipv6 = {
 	.so_rev_target = IP6T_SO_GET_REVISION_TARGET,
 };
 
+/* Dummy families for arptables-compat and ebtables-compat. Leave structure
+ * fields that we don't use unset.
+ */
 static const struct xtables_afinfo afinfo_bridge = {
-	.kmod          = "eb_tables",
-	.proc_exists   = "/proc/net/eb_tables_names",
 	.libprefix     = "libebt_",
 	.family        = NFPROTO_BRIDGE,
-	.ipproto       = IPPROTO_IP,
-	.so_rev_match  = -1,
-	.so_rev_target = -1,
 };
 
 static const struct xtables_afinfo afinfo_arp = {
-	.kmod          = "arp_tables",
-	.proc_exists   = "/proc/net/eb_tables_names",
 	.libprefix     = "libarpt_",
 	.family        = NFPROTO_ARP,
-	.ipproto       = IPPROTO_IP,
-	.so_rev_match  = -1,
-	.so_rev_target = -1,
 };
 
 const struct xtables_afinfo *afinfo;
-- 
1.7.10.4

--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html




[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux