16 Oct, 2007

1 commit

• 3db05fea5   [NETFILTER]: Replace sk_buff ** with sk_buff * ... Browse Code »

  With all the users of the double pointers removed, this patch mops up by
  finally replacing all occurances of sk_buff ** in the netfilter API by
  sk_buff *.

  Signed-off-by: Herbert Xu
  Signed-off-by: David S. Miller

  Herbert Xu

  2007-10-16 03:26:29 +0800  

11 Jul, 2007

2 commits

• 9f15c5302   [NETFILTER]: x_tables: mark matches and targets __read_mostly ... Browse Code »

  Signed-off-by: Patrick McHardy
  Signed-off-by: David S. Miller

  Patrick McHardy

  2007-07-11 13:17:15 +0800  
• e1931b784   [NETFILTER]: x_tables: switch xt_target->checkentry to bool ... Browse Code »

  Switch the return type of target checkentry functions to boolean.

  Signed-off-by: Jan Engelhardt
  Signed-off-by: Patrick McHardy
  Signed-off-by: David S. Miller

  Jan Engelhardt

  2007-07-11 13:16:59 +0800  

13 Feb, 2007

1 commit

• 601e68e10   [NETFILTER]: Fix whitespace errors ... Browse Code »

  Signed-off-by: YOSHIFUJI Hideaki
  Signed-off-by: Patrick McHardy
  Signed-off-by: David S. Miller

  YOSHIFUJI Hideaki

  2007-02-13 03:15:49 +0800  

09 Feb, 2007

1 commit

• 2822b0d92   [NETFILTER]: Remove useless comparisons before assignments ... Browse Code »

  Remove unnecessary if() constructs before assignment.

  Signed-off-by: Jan Engelhardt
  Signed-off-by: Patrick McHardy
  Signed-off-by: David S. Miller

  Jan Engelhardt

  2007-02-09 04:39:11 +0800  

23 Sep, 2006

4 commits

• 280948642   [NETFILTER]: x_tables: Fix typos after conversion to use mass registation helper ... Browse Code »

  Signed-off-by: Thomas Graf
  Signed-off-by: David S. Miller

  Thomas Graf

  2006-09-23 05:55:40 +0800  
• efa741656   [NETFILTER]: x_tables: remove unused size argument to check/destroy functions ... Browse Code »

  The size is verified by x_tables and isn't needed by the modules anymore.

  Signed-off-by: Patrick McHardy
  Signed-off-by: David S. Miller

  Patrick McHardy

  2006-09-23 05:55:34 +0800  
• fe1cb1087   [NETFILTER]: x_tables: remove unused argument to target functions ... Browse Code »

  Signed-off-by: Patrick McHardy
  Signed-off-by: David S. Miller

  Patrick McHardy

  2006-09-23 05:55:33 +0800  
• 4470bbc74   [NETFILTER]: x_tables: make use of mass registation helpers ... Browse Code »

  Signed-off-by: Patrick McHardy
  Signed-off-by: David S. Miller

  Patrick McHardy

  2006-09-23 05:55:32 +0800  

03 Aug, 2006

1 commit

• a280b8998   [SECURITY] secmark: nul-terminate secdata ... Browse Code »

  The patch below fixes a problem in the iptables SECMARK target, where
  the user-supplied 'selctx' string may not be nul-terminated.

  From initial analysis, it seems that the strlen() called from
  selinux_string_to_sid() could run until it arbitrarily finds a zero,
  and possibly cause a kernel oops before then.

  The impact of this appears limited because the operation requires
  CAP_NET_ADMIN, which is essentially always root. Also, the module is
  not yet in wide use.

  Signed-off-by: James Morris
  Signed-off-by: Stephen Smalley
  Signed-off-by: David S. Miller

  James Morris

  2006-08-03 04:38:23 +0800  

18 Jun, 2006

1 commit

• 5e6874cdb   [SECMARK]: Add xtables SECMARK target ... Browse Code »

  Add a SECMARK target to xtables, allowing the admin to apply security
  marks to packets via both iptables and ip6tables.

  The target currently handles SELinux security marking, but can be
  extended for other purposes as needed.

  Signed-off-by: James Morris
  Signed-off-by: Andrew Morton
  Signed-off-by: David S. Miller

  James Morris

  2006-06-18 12:29:59 +0800