netdev - Re: [PATCH 1/6] netns brnetfilter: per-netns ebtables

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20081013073501.GB4254@x200.localdomain>
Date:	Mon, 13 Oct 2008 11:35:01 +0400
From:	Alexey Dobriyan <adobriyan@...il.com>
To:	Ingo Molnar <mingo@...e.hu>
Cc:	shemminger@...ux-foundation.org, netdev@...r.kernel.org,
	containers@...ts.linux-foundation.org, kaber@...sh.et,
	"David S. Miller" <davem@...emloft.net>
Subject: Re: [PATCH 1/6] netns brnetfilter: per-netns ebtables

On Mon, Oct 13, 2008 at 09:09:40AM +0200, Ingo Molnar wrote:
> 
> * Ingo Molnar <mingo@...e.hu> wrote:
> 
> > 
> > * adobriyan@...il.com <adobriyan@...il.com> wrote:
> > 
> > > * make registered ebtables list per-netns
> > > * for that, duplicate table at the very beginning of register,
> > >   we can't add one table to multiple lists.
> > > * propagate netns from userspace socket down to iterators over list,
> > > * register individual modules only in init_net for a minute.
> > > 
> > > Signed-off-by: Alexey Dobriyan <adobriyan@...il.com>
> > 
> > -tip testing found this build failure, config attached:
> > 
> > ERROR: "ebt_unregister_table" [net/bridge/netfilter/ebtable_nat.ko] undefined!
> > ERROR: "ebt_register_table" [net/bridge/netfilter/ebtable_nat.ko] undefined!
> > ERROR: "ebt_do_table" [net/bridge/netfilter/ebtable_nat.ko] undefined!
> > ERROR: "ebt_unregister_table" [net/bridge/netfilter/ebtable_broute.ko] undefined!
> > ERROR: "ebt_register_table" [net/bridge/netfilter/ebtable_broute.ko] undefined!
> > ERROR: "ebt_do_table" [net/bridge/netfilter/ebtable_broute.ko] undefined!
> > make[1]: *** [__modpost] Error 1
> > make: *** [modules] Error 2
> 
> i had a quick look and i think the problem is that CONFIG_BRIDGE=m so 
> the ebt_unregister_table symbol is not available to modules properly. 
> But i've not dug down deep.

Ouch, how they managed to get there?

Anyway, ebtables were rewritten to work via xtables, so these patches
are most certainly obsolete, better drop and forget. I should post new
version soon.
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html