This series further reduces size of the hook arrays by only resevering space for the hooks that are implemented/supported (e.g., arp only supports 3 different hook points as it lacks PRE/POST_ROUTING). Furthermore, add #ifdef guard to not declare arp/bridge/decnet hooks unless they are needed. At least Fedora has CONFIG_DECNET=n so this even reduces size for some distro kernels. I ran a few randconfig builds last night and it did not catch any build errors. Florian Westphal (3): netfilter: reduce hook array sizes to what is needed netfilter: don't allocate space for decnet hooks unless needed netfilter: don't allocate space for arp/bridge hooks unless needed include/linux/netfilter.h | 6 ++++++ include/net/netns/netfilter.h | 19 ++++++++++++++----- net/Kconfig | 1 + net/bridge/netfilter/Kconfig | 2 ++ net/ipv4/netfilter/Kconfig | 2 ++ net/netfilter/Kconfig | 6 ++++++ net/netfilter/core.c | 22 ++++++++++++++++++++++ net/netfilter/nf_queue.c | 2 ++ 8 files changed, 55 insertions(+), 5 deletions(-) -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html