netfilter: nf_tables: use dedicated mutex to guard transactions

Browse source

Continue to use nftnl subsys mutex to protect (un)registration of hook types,
expressions and so on, but force batch operations to do their own
locking.

This allows distinct net namespaces to perform transactions in parallel.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

...

This commit is contained in:

Florian Westphal 2018-07-11 13:45:14 +02:00 • committed by Pablo Neira Ayuso

parent 2a43ecf96b

commit f102d66b33

5 changed files with 77 additions and 28 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

1

include/net/netns/nftables.h

View file

88

net/netfilter/nf_tables_api.c

View file

10

net/netfilter/nfnetlink.c

View file

4

net/netfilter/nft_chain_filter.c

View file

2

net/netfilter/nft_dynset.c

View file