netdev - Re: [RFC nf-next 1/3] netfilter: bridge: add and use br_nf_hook

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:	Wed, 22 Jun 2016 17:43:11 -0400
From:	Aaron Conole <aconole@...heb.org>
To:	netdev@...r.kernel.org
Cc:	netfilter-devel@...r.kernel.org
Subject: Re: [RFC nf-next 1/3] netfilter: bridge: add and use br_nf_hook_thresh

Aaron Conole <aconole@...heb.org> writes:

> From: Florian Westphal <fw@...len.de>
>
> This replaces the last uses of NF_HOOK_THRESH().
> Followup patch will remove it and rename nf_hook_thresh.
>
> The reason is that inet (non-bridge) netfilter no longer invokes the
> hooks from hooks, so we do no longer need the thresh value to skip hooks
> with a lower priority.
>
> The bridge netfilter however may need to do this. br_nf_hook_thresh is a
> wrapper that is supposed to do this, i.e. only call hooks with a
> priority that exceeds NF_BR_PRI_BRNF.
>
> It's used only in the recursion cases of br_netfilter.
>
> Signed-off-by: Florian Westphal <fw@...len.de>
> Signed-off-by: Aaron Conole <aconole@...hat.com>
> ---

I will make sure to fix the address in this patch.  Apologies.