Re: [PATCH v2 1/2] netfilter: nf_tables: add SECMARK support
From: Christian Göttsche <hidden>
Date: 2018-09-23 15:31:31
Also in:
linux-security-module, lkml, netfilter-devel, selinux
quoted
+struct nft_secmark { + char ctx[NFT_SECMARK_CTX_MAXLEN]; + int len; + u32 secid; +};Can you change this to: struct nft_secmark { u32 secid; char *ctx; };
Does the nla_policy struct needs an update too? (regarding then .len member)
+static const struct nla_policy nft_secmark_policy[NFTA_SECMARK_MAX + 1] = {
+ [NFTA_SECMARK_CTX] = { .type = NLA_STRING, .len =
NFT_SECMARK_CTX_MAXLEN },
+}
NFT_SECMARK_CTX_MAXLEN might be dropped then..