diff options
| author |   Florian Westphal <fw@strlen.de> | 2015-07-14 17:51:07 +0200 |
|---|---|---|
| committer |   Pablo Neira Ayuso <pablo@netfilter.org> | 2015-07-15 18:18:05 +0200 |
| commit | e7c8899f3e6f2830136cf6e115c4a55ce7a3920a (patch) | |
| tree | 69361fc86865dd5aae94836f3af466711cf67494 /net/netfilter/core.c | |
| parent | netfilter: xtables: compute exact size needed for jumpstack (diff) | |
| download | linux-dev-e7c8899f3e6f2830136cf6e115c4a55ce7a3920a.tar.xz linux-dev-e7c8899f3e6f2830136cf6e115c4a55ce7a3920a.zip | |
netfilter: move tee_active to core
This prepares for a TEE like expression in nftables.
We want to ensure only one duplicate is sent, so both will
use the same percpu variable to detect duplication.
The other use case is detection of recursive call to xtables, but since
we don't want dependency from nft to xtables core its put into core.c
instead of the x_tables core.
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netfilter/core.c')
| -rw-r--r-- | net/netfilter/core.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/net/netfilter/core.c b/net/netfilter/core.c index 56ead1a1711c..6896cee8b733 100644 --- a/net/netfilter/core.c +++ b/net/netfilter/core.c @@ -34,6 +34,9 @@ EXPORT_SYMBOL(nf_afinfo); const struct nf_ipv6_ops __rcu *nf_ipv6_ops __read_mostly; EXPORT_SYMBOL_GPL(nf_ipv6_ops); +DEFINE_PER_CPU(bool, nf_skb_duplicated); +EXPORT_SYMBOL_GPL(nf_skb_duplicated); + int nf_register_afinfo(const struct nf_afinfo *afinfo) { mutex_lock(&afinfo_mutex); |