]> www.infradead.org Git - users/dwmw2/linux.git/commit
netfilter: flowtable: restrict flow dissector match on meta ingress device
authorPablo Neira Ayuso <pablo@netfilter.org>
Mon, 6 Jan 2020 11:42:55 +0000 (12:42 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 14 Feb 2020 21:52:58 +0000 (16:52 -0500)
commitee3a1fa516cd0d719320231e7e04b089b22151b2
treee87e49b74672f15010247aa2324a31a3be99404a
parent4ef9eaf4487dfa038ec395357133e02fc42f598d
netfilter: flowtable: restrict flow dissector match on meta ingress device

commit a7521a60a5f3e1f58a015fedb6e69aed40455feb upstream.

Set on FLOW_DISSECTOR_KEY_META meta key using flow tuple ingress interface.

Fixes: c29f74e0df7a ("netfilter: nf_flow_table: hardware offload support")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/netfilter/nf_flow_table_offload.c