10 Apr, 2008

1 commit


28 Mar, 2008

1 commit


20 Feb, 2008

1 commit


01 Feb, 2008

3 commits

  • The hashlimit_ipv6_mask() is called from under IP6_NF_IPTABLES config
    option, but is not under it by itself.

    gcc warns us about it :) :
    net/netfilter/xt_hashlimit.c:473: warning: "hashlimit_ipv6_mask" defined but not used

    Signed-off-by: Pavel Emelyanov
    Signed-off-by: David S. Miller

    Pavel Emelyanov
     
  • Introduces the xt_hashlimit match revision 1. It adds support for
    kernel-level inversion and grouping source and/or destination IP
    addresses, allowing to limit on a per-subnet basis. While this would
    technically obsolete xt_limit, xt_hashlimit is a more expensive due
    to the hashbucketing.

    Kernel-level inversion: Previously you had to do user-level inversion:

    iptables -N foo
    iptables -A foo -m hashlimit --hashlimit(-upto) 5/s -j RETURN
    iptables -A foo -j DROP
    iptables -A INPUT -j foo

    now it is simpler:

    iptables -A INPUT -m hashlimit --hashlimit-over 5/s -j DROP

    Signed-off-by: Jan Engelhardt
    Signed-off-by: Patrick McHardy
    Signed-off-by: David S. Miller

    Jan Engelhardt
     
  • Some lock annotations, and make initializers static.

    Signed-off-by: Stephen Hemminger
    Signed-off-by: Patrick McHardy
    Signed-off-by: David S. Miller

    Stephen Hemminger
     

29 Jan, 2008

5 commits


15 Dec, 2007

1 commit


11 Oct, 2007

1 commit

  • This patch makes /proc/net per network namespace. It modifies the global
    variables proc_net and proc_net_stat to be per network namespace.
    The proc_net file helpers are modified to take a network namespace argument,
    and all of their callers are fixed to pass &init_net for that argument.
    This ensures that all of the /proc/net files are only visible and
    usable in the initial network namespace until the code behind them
    has been updated to be handle multiple network namespaces.

    Making /proc/net per namespace is necessary as at least some files
    in /proc/net depend upon the set of network devices which is per
    network namespace, and even more files in /proc/net have contents
    that are relevant to a single network namespace.

    Signed-off-by: Eric W. Biederman
    Signed-off-by: David S. Miller

    Eric W. Biederman
     

20 Jul, 2007

1 commit

  • Slab destructors were no longer supported after Christoph's
    c59def9f222d44bb7e2f0a559f2906191a0862d7 change. They've been
    BUGs for both slab and slub, and slob never supported them
    either.

    This rips out support for the dtor pointer from kmem_cache_create()
    completely and fixes up every single callsite in the kernel (there were
    about 224, not including the slab allocator definitions themselves,
    or the documentation references).

    Signed-off-by: Paul Mundt

    Paul Mundt
     

11 Jul, 2007

7 commits


26 Apr, 2007

3 commits


13 Feb, 2007

2 commits


09 Feb, 2007

1 commit


04 Jan, 2007

1 commit


08 Dec, 2006

1 commit

  • Replace all uses of kmem_cache_t with struct kmem_cache.

    The patch was generated using the following script:

    #!/bin/sh
    #
    # Replace one string by another in all the kernel sources.
    #

    set -e

    for file in `find * -name "*.c" -o -name "*.h"|xargs grep -l $1`; do
    quilt add $file
    sed -e "1,\$s/$1/$2/g" $file >/tmp/$$
    mv /tmp/$$ $file
    quilt refresh
    done

    The script was run like this

    sh replace kmem_cache_t "struct kmem_cache"

    Signed-off-by: Christoph Lameter
    Signed-off-by: Andrew Morton
    Signed-off-by: Linus Torvalds

    Christoph Lameter
     

04 Dec, 2006

1 commit


03 Dec, 2006

2 commits