Hi,
The following patchset contains Netfilter updates for net-next:
1) Add support for the catch-all set element. This special element
can be used to define a default action to be applied in case that
the set lookup returns no matching element.
2) Fix incorrect #ifdef dependencies in the nftables cgroupsv2
support, from Arnd Bergmann.
Please, pull these changes from:
git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next.git
Thanks!
----------------------------------------------------------------
The following changes since commit 6d72e7c767acbbdd44ebc7d89c6690b405b32b57:
net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (2021-04-26 13:07:30 -0700)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next.git HEAD
for you to fetch changes up to 7acc0bb490c85012bcbda142b6755fd1fdf1fba1:
netfilter: nft_socket: fix build with CONFIG_SOCK_CGROUP_DATA=n (2021-04-27 22:34:05 +0200)
----------------------------------------------------------------
Arnd Bergmann (2):
netfilter: nft_socket: fix an unused variable warning
netfilter: nft_socket: fix build with CONFIG_SOCK_CGROUP_DATA=n
Pablo Neira Ayuso (5):
netfilter: nftables: rename set element data activation/deactivation functions
netfilter: nftables: add loop check helper function
netfilter: nftables: add helper function to flush set elements
netfilter: nftables: add helper function to validate set element data
netfilter: nftables: add catch-all set element support
include/net/netfilter/nf_tables.h | 5 +
include/uapi/linux/netfilter/nf_tables.h | 2 +
net/netfilter/nf_tables_api.c | 576 ++++++++++++++++++++++++++-----
net/netfilter/nft_lookup.c | 12 +-
net/netfilter/nft_objref.c | 11 +-
net/netfilter/nft_set_hash.c | 6 +
net/netfilter/nft_set_pipapo.c | 6 +-
net/netfilter/nft_set_rbtree.c | 6 +
net/netfilter/nft_socket.c | 11 +-
9 files changed, 532 insertions(+), 103 deletions(-)
