diff options
| author | Florian Westphal <[email protected]> | 2022-07-26 19:49:00 +0200 |
|---|---|---|
| committer | Florian Westphal <[email protected]> | 2022-07-26 21:12:42 +0200 |
| commit | 47f4f510ad586032b85c89a0773fbb011d412425 (patch) | |
| tree | 7b5cf8909cb4ea535ab69853e72ce215947faed0 /lib/mpi/mpi-mod.c | |
| parent | 81ea010667417ef3f218dfd99b69769fe66c2b67 (diff) | |
netfilter: nft_queue: only allow supported familes and hooks
Trying to use 'queue' statement in ingress (for example)
triggers a splat on reinject:
WARNING: CPU: 3 PID: 1345 at net/netfilter/nf_queue.c:291
... because nf_reinject cannot find the ruleset head.
The netdev family doesn't support async resume at the moment anyway,
so disallow loading such rulesets with a more appropriate
error message.
v2: add 'validate' callback and also check hook points, v1 did
allow ingress use in 'table inet', but that doesn't work either. (Pablo)
Signed-off-by: Florian Westphal <[email protected]>
Reviewed-by: Pablo Neira Ayuso <[email protected]>
Diffstat (limited to 'lib/mpi/mpi-mod.c')
0 files changed, 0 insertions, 0 deletions