Age | Commit message (Collapse) | Author |
|
Change-Id: Ifacb42f560a261a7178f0e4c1519a08d0793efb0
|
|
This change enables Async mode ARM MTE in iptables on compatible
hardware and has no effect otherwise.
Bug: 181603044
Test: atest under system/netd/tests
Change-Id: I6916462c36f34332fc14c140be619d946c22d1f5
Merged-In: I6916462c36f34332fc14c140be619d946c22d1f5
(cherry picked from commit bfcaf7b8d786e69539b51156782ffa42379f1e68)
|
|
Change-Id: Icceb991e47a7bbb7645bd53e88645649992fd9f8
|
|
7b1df5255c
Original change: https://android-review.googlesource.com/c/platform/external/iptables/+/1650938
Change-Id: I05d9c24ef351a2f9b1661ebab619a61db6c16a3b
|
|
3799b1e13f am: f751c1415e
Original change: https://android-review.googlesource.com/c/platform/external/iptables/+/1650937
Change-Id: I2d1d6c9df66bb0908ecd75f3ddba7712819ff6a8
|
|
Original change: https://android-review.googlesource.com/c/platform/external/iptables/+/1650936
Change-Id: I0e3207c45956c509447a3381991fe2f19d574d6b
|
|
e3fbb32008 am: 51119072b7
Original change: https://android-review.googlesource.com/c/platform/external/iptables/+/1650935
Change-Id: Ic76a7e8ca9e382dff33157f3868178bece99116d
|
|
72f23c9bf9 am: af645f03f7
Original change: https://android-review.googlesource.com/c/platform/external/iptables/+/1650934
Change-Id: I78d13cf391bf31162e583ff5536bc8713de407e8
|
|
40cceefbdd am: 9f34af727c
Original change: https://android-review.googlesource.com/c/platform/external/iptables/+/1650933
Change-Id: Ib0bb53693d4e1bf4a3e7f42e57054a4105f29e14
|
|
d10bb0c810
Original change: https://android-review.googlesource.com/c/platform/external/iptables/+/1650932
Change-Id: I7c4d2b39f1f0331c53def6a761ae6bbf7c6da6c0
|
|
Original change: https://android-review.googlesource.com/c/platform/external/iptables/+/1650938
Change-Id: Ib1ab493361b810c33224ab364a9756397f1210bf
|
|
Original change: https://android-review.googlesource.com/c/platform/external/iptables/+/1650937
Change-Id: I5d9d860bd592e5005bb0b0b97caa21ad9f99abe0
|
|
Original change: https://android-review.googlesource.com/c/platform/external/iptables/+/1650936
Change-Id: I13cad964647230026946d0d113dc12800a4855c4
|
|
e3fbb32008
Original change: https://android-review.googlesource.com/c/platform/external/iptables/+/1650935
Change-Id: Icaa33bafafc838fe87d2aa595f4171a977c89ffe
|
|
72f23c9bf9
Original change: https://android-review.googlesource.com/c/platform/external/iptables/+/1650934
Change-Id: If07d29396cc2c2bd2d5676e91066c1d0bdb37547
|
|
40cceefbdd
Original change: https://android-review.googlesource.com/c/platform/external/iptables/+/1650933
Change-Id: I6af5c6850707853ed4dddb9103e46ab651fefe6d
|
|
Original change: https://android-review.googlesource.com/c/platform/external/iptables/+/1650932
Change-Id: Id9673e38926613f5391e41458af977807af782b2
|
|
Original change: https://android-review.googlesource.com/c/platform/external/iptables/+/1650938
Change-Id: Ife58046dcaa87539fd0e6cf9d8e04c459d54565a
|
|
Original change: https://android-review.googlesource.com/c/platform/external/iptables/+/1650937
Change-Id: I161493ffedc6c18aba3c0cb8421913db689321cf
|
|
Original change: https://android-review.googlesource.com/c/platform/external/iptables/+/1650936
Change-Id: Ibfb1e11ad304c7658aff15e273a812071408ad61
|
|
Original change: https://android-review.googlesource.com/c/platform/external/iptables/+/1650935
Change-Id: Iea483b0900bce0423d74100b6c65a6ffdf62b1cb
|
|
Original change: https://android-review.googlesource.com/c/platform/external/iptables/+/1650934
Change-Id: I0aee86624daabc571585b7bfee66accdba32bf45
|
|
Original change: https://android-review.googlesource.com/c/platform/external/iptables/+/1650933
Change-Id: Id81a6b748ff68fc5c0a93ad9ba4154fb17034317
|
|
Original change: https://android-review.googlesource.com/c/platform/external/iptables/+/1650932
Change-Id: If5c8371f7850d45575ce832d439abe14736325a1
|
|
* changes:
ANDROID: re-add xt_IDLETIMER changes
ANDROID: fix build for missing ETH_ALEN definition
ANDROID: update to 1.8.7 version
Merge tag 'v1.8.7' of git://git.netfilter.org/iptables
Merge tag 'v1.8.6' of git://git.netfilter.org/iptables
Merge tag 'v1.8.5' of git://git.netfilter.org/iptables
ANDROID: revert to upstream xt_IDLETIMER
|
|
(but this time in a more upstream compatible fashion)
Test: atest, TreeHugger
Bug: 183485987
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: Iba7aefffcd19910466bbbfeafef1d5c964e59a95
|
|
Test: see followup commits
Bug: 183485987
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: I2322f6e9a1f7a54adceeaf9cb3fe9b4cf78b1885
|
|
Test: see followup commits
Bug: 183485987
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: I64b3c82de12802442e47151ee839edec5ecd10a4
|
|
iptables 1.8.7 release
Test: part of series, see followup commits
Bug: 183485987
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: I9aa1d4d5603ba94b79198bc1594fc237222f933a
|
|
iptables 1.8.6 release
Test: part of series, see followup commits
Bug: 183485987
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: Iec08e6fc411268f5f1caaed1352b0b1649a70a6c
|
|
iptables 1.8.5 release
Test: part of series, see followup commits
Bug: 183485987
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: I6083f7138ed0bd9e2685c9e7aaa0483377288dd9
|
|
Generated via:
git fetch git://git.netfilter.org/iptables refs/tags/v1.8.4
for i in extensions/libxt_IDLETIMER.c extensions/libxt_IDLETIMER.man include/linux/netfilter/xt_IDLETIMER.h; do
git cat-file -p FETCH_HEAD:$i > $i
done
Test: part of series - see followup commits
Bug: 183485987
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: I3d943d0205625e3234cf13082504164a5dc713b3
|
|
Change-Id: I4ddc9137fa9bfe692f1288d7ec7c833d87fd48ff
|
|
ours am: bb04fbe2a6 -s ours
am skip reason: Change-Id I531dd401b93a779a09c02a954f0228c97921ed03 with SHA-1 5ed935fb1a is in history
Original change: undetermined
MUST ONLY BE SUBMITTED BY AUTOMERGER
Change-Id: I23dc6f461294494808b14f53b68fcb27a7f22546
|
|
am skip reason: Change-Id I531dd401b93a779a09c02a954f0228c97921ed03 with SHA-1 5ed935fb1a is in history
Original change: undetermined
MUST ONLY BE SUBMITTED BY AUTOMERGER
Change-Id: I1d3ed6f7a85c574b4aa351b7670918fca7fe4934
|
|
Bug: 180401296
Merged-In: I531dd401b93a779a09c02a954f0228c97921ed03
Change-Id: I06532152bdf82ef74b10a498326ccf8b43427ca5
|
|
Change-Id: I81a9356bf98a5481b30a1ec7ecb2a5270b321bdb
|
|
am: ad91f45aaf am: 6af95f3631
Original change: https://android-review.googlesource.com/c/platform/external/iptables/+/1588826
MUST ONLY BE SUBMITTED BY AUTOMERGER
Change-Id: Iae669da6b0ff6d202e93bd26320dc4060a638681
|
|
am: ad91f45aaf
Original change: https://android-review.googlesource.com/c/platform/external/iptables/+/1588826
MUST ONLY BE SUBMITTED BY AUTOMERGER
Change-Id: I52ca0d0d1026ebcfc9938e88ae21e266e8e66ea9
|
|
Original change: https://android-review.googlesource.com/c/platform/external/iptables/+/1588826
MUST ONLY BE SUBMITTED BY AUTOMERGER
Change-Id: I66d1daa0e0f92d00d89554cc0601a07a70c0d37e
|
|
|
|
Added SPDX-license-identifier-Artistic
SPDX-license-identifier-Artistic-2.0 SPDX-license-identifier-GPL
SPDX-license-identifier-GPL-2.0 SPDX-license-identifier-LGPL
to:
iptables/Android.bp
Added SPDX-license-identifier-Artistic
SPDX-license-identifier-Artistic-2.0 SPDX-license-identifier-GPL
SPDX-license-identifier-GPL-2.0 SPDX-license-identifier-LGPL
SPDX-license-identifier-MIT
to:
Android.bp
Added SPDX-license-identifier-GPL
to:
libiptc/Android.bp
Added SPDX-license-identifier-GPL SPDX-license-identifier-GPL-2.0
to:
extensions/Android.bp
Added SPDX-license-identifier-GPL-2.0 SPDX-license-identifier-LGPL
to:
libxtables/Android.bp
Bug: 68860345
Bug: 151177513
Bug: 151953481
Test: m all
Exempt-From-Owner-Approval: janitorial work
Change-Id: I457d29f9cf99f841712fa9d015859fbd7a51a5f9
|
|
Update libtool version for libxtables since two new interfaces have been
added:
- xtables_parse_mac_and_mask()
- xtables_print_well_known_mac_and_mask()
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
|
|
For whatever reason, stored expected output contains false handles. To
overcome this, filter the rule data lines from both expected and stored
output before comparing.
Fixes: 81a2e12851283 ("tests/shell: Add test for bitwise avoidance fixes")
Signed-off-by: Phil Sutter <phil@nwl.cc>
|
|
Accept a chain name in nft_xt_builtin_init() to limit the base chain
creation to that specific chain only.
Introduce nft_xt_builtin_table_init() to create just the table for
situations where no builtin chains are needed but the command may still
succeed in an empty ruleset, particularly when creating a custom chain,
restoring base chains or adding a set for ebtables among match.
Introduce nft_xt_fake_builtin_chains(), a function to call after cache
has been populated to fill empty base chain slots. This keeps ruleset
listing output intact if some base chains do not exist (or even the
whole ruleset is completely empty).
Signed-off-by: Phil Sutter <phil@nwl.cc>
|
|
With iptables-nft-save output now sorted just like legacy one, no
sorting to unify them is needed anymore.
Signed-off-by: Phil Sutter <phil@nwl.cc>
|
|
With base chains no longer residing in the tables' chain lists, they can
easily be sorted upon insertion. This on one hand aligns custom chain
ordering with legacy iptables and on the other makes it predictable,
which is very helpful when manually comparing ruleset dumps for
instance.
Adjust the one ebtables-nft test case this change breaks (as wrong
ordering is expected in there). The manual output sorting done for tests
which apply to legacy as well as nft is removed in a separate patch.
Signed-off-by: Phil Sutter <phil@nwl.cc>
|
|
Preparing for sorted chain output, introduce a per-table array holding
base chains indexed by nf_inet_hooks value. Since the latter is ordered
correctly, iterating over the array will return base chains in expected
order.
Signed-off-by: Phil Sutter <phil@nwl.cc>
|
|
Preparing for ordered output of user-defined chains, introduce a local
datatype wrapping nftnl_chain. In order to maintain the chain name hash
table, introduce nft_chain_list as well and use it instead of
nftnl_chain_list.
Signed-off-by: Phil Sutter <phil@nwl.cc>
|
|
It is basically just a cache lookup, hence fits better in here.
Signed-off-by: Phil Sutter <phil@nwl.cc>
|