diff options
| author | Phil Sutter <phil@nwl.cc> | 2023-12-21 16:31:59 +0300 |
|---|---|---|
| committer | Florian Westphal <fw@strlen.de> | 2024-01-29 17:43:20 +0300 |
| commit | 31bf508be656a429a17e3adb31e9acae5c1a6299 (patch) | |
| tree | ce35b9e6d54ca3d486ab04fa5b53ac651fa4f79b /net/netfilter/nf_conncount.c | |
| parent | da5141bbe0c2693d85f14a89ee991921904f4d0c (diff) | |
| download | linux-31bf508be656a429a17e3adb31e9acae5c1a6299.tar.xz | |
netfilter: nf_tables: Implement table adoption support
Allow a new process to take ownership of a previously owned table,
useful mostly for firewall management services restarting or suspending
when idle.
By extending __NFT_TABLE_F_UPDATE, the on/off/on check in
nf_tables_updtable() also covers table adoption, although it is actually
not needed: Table adoption is irreversible because nf_tables_updtable()
rejects attempts to drop NFT_TABLE_F_OWNER so table->nlpid setting can
happen just once within the transaction.
If the transaction commences, table's nlpid and flags fields are already
set and no further action is required. If it aborts, the table returns
to orphaned state.
Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'net/netfilter/nf_conncount.c')
0 files changed, 0 insertions, 0 deletions