netfilter: nf_tables: add NFTA_RULE_ID attribute

Browse source

This new attribute allows us to uniquely identify a rule in transaction.
Robots may trigger an insertion followed by deletion in a batch, in that
scenario we still don't have a public rule handle that we can use to
delete the rule. This is similar to the NFTA_SET_ID attribute that
allows us to refer to an anonymous set from a batch.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

...

This commit is contained in:

Pablo Neira Ayuso 2017-02-10 12:08:23 +01:00

parent 74e8bcd21c

commit 1a94e38d25

3 changed files with 31 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

3

include/net/netfilter/nf_tables.h

View file

2

include/uapi/linux/netfilter/nf_tables.h

View file

26

net/netfilter/nf_tables_api.c

View file