[PATCH 01/25 DO NOT APPLY] netns nf: enable netfilter in netns
From: Alexey Dobriyan <hidden>
Date: 2008-06-22 01:04:16
Also in:
netfilter-devel
Patch allows to manipulate netfilter rules and entry into actual filtering code. Noticeable chunks of netfilter are still not netns-ready, so patch is for testing only. --- net/netfilter/core.c | 8 -------- net/netfilter/nf_sockopt.c | 3 --- 2 files changed, 11 deletions(-)
--- a/net/netfilter/core.c
+++ b/net/netfilter/core.c@@ -165,14 +165,6 @@ int nf_hook_slow(int pf, unsigned int hook, struct sk_buff *skb, unsigned int verdict; int ret = 0; -#ifdef CONFIG_NET_NS - struct net *net; - - net = indev == NULL ? dev_net(outdev) : dev_net(indev); - if (net != &init_net) - return 1; -#endif - /* We may already have this, but read-locks nest anyway */ rcu_read_lock(); --- a/net/netfilter/nf_sockopt.c +++ b/net/netfilter/nf_sockopt.c
@@ -65,9 +65,6 @@ static struct nf_sockopt_ops *nf_sockopt_find(struct sock *sk, int pf, { struct nf_sockopt_ops *ops; - if (sock_net(sk) != &init_net) - return ERR_PTR(-ENOPROTOOPT); - if (mutex_lock_interruptible(&nf_sockopt_mutex) != 0) return ERR_PTR(-EINTR);
--
1.5.4.5