netfiler: ipset: Add net namespace for ipset

Browse source

This patch adds netns support for ipset.

Major changes were made in ip_set_core.c and ip_set.h.
Global variables are moved to per net namespace.
Added initialization code and the destruction of the network namespace ipset subsystem.
In the prototypes of public functions ip_set_* added parameter "struct net*".

The remaining corrections related to the change prototypes of public functions ip_set_*.

The patch for git://git.netfilter.org/ipset.git commit 6a4ec96c0b8caac5c35474e40e319704d92ca347

Signed-off-by: Vitaly Lavrov <lve@guap.ru>
Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>

...

This commit is contained in:

Vitaly Lavrov 2013-09-30 17:07:02 +02:00 • committed by Jozsef Kadlecsik

parent 3fd986b3d9

commit 1785e8f473

9 changed files with 245 additions and 148 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

16

include/linux/netfilter/ipset/ip_set.h

View file

3

net/netfilter/ipset/ip_set_bitmap_ip.c

View file

2

net/netfilter/ipset/ip_set_bitmap_ipmac.c

View file

3

net/netfilter/ipset/ip_set_bitmap_port.c

View file

296

net/netfilter/ipset/ip_set_core.c

View file

3

net/netfilter/ipset/ip_set_hash_gen.h

View file

31

net/netfilter/ipset/ip_set_list_set.c

View file

40

net/netfilter/xt_set.c

View file

7

net/sched/em_ipset.c

View file