diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2015-12-15 19:40:49 +0100 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2015-12-28 18:34:35 +0100 |
| commit | 5ebe0b0eec9d6f703b137f9b938c52f7b91dd9d6 (patch) | |
| tree | 3bce71064195708c73697ffba15606f43256561e /include/net | |
| parent | netfilter: nf_tables: release objects on netns destruction (diff) | |
| download | linux-5ebe0b0eec9d6f703b137f9b938c52f7b91dd9d6.tar.xz linux-5ebe0b0eec9d6f703b137f9b938c52f7b91dd9d6.zip | |
netfilter: nf_tables: destroy basechain and rules on netdevice removal
If the netdevice is destroyed, the resources that are attached should
be released too as they belong to the device that is now gone.
Suggested-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'include/net')
| -rw-r--r-- | include/net/netfilter/nf_tables.h | 5 |
1 files changed, 1 insertions, 4 deletions
diff --git a/include/net/netfilter/nf_tables.h b/include/net/netfilter/nf_tables.h index a50f139ce087..0191fbb33a2f 100644 --- a/include/net/netfilter/nf_tables.h +++ b/include/net/netfilter/nf_tables.h @@ -821,10 +821,7 @@ static inline struct nft_base_chain *nft_base_chain(const struct nft_chain *chai return container_of(chain, struct nft_base_chain, chain); } -int nft_register_basechain(struct nft_base_chain *basechain, - unsigned int hook_nops); -void nft_unregister_basechain(struct nft_base_chain *basechain, - unsigned int hook_nops); +int __nft_release_basechain(struct nft_ctx *ctx); unsigned int nft_do_chain(struct nft_pktinfo *pkt, void *priv); |