Re: [PATCH -next 5/6] netfilter: Per network namespace netfilter hooks.

2015-07-15 Thread Eric W. Biederman
Pablo Neira Ayuso writes: > On Fri, Jul 10, 2015 at 06:15:06PM -0500, Eric W. Biederman wrote: >> @@ -102,13 +112,35 @@ int nf_register_hook(struct nf_hook_ops *reg) >> #endif >> return 0; >> } >> -EXPORT_SYMBOL(nf_register_hook); >> +EXPORT_SYMBOL(nf_register_net_hook); >> >> -void nf_u

Re: [PATCH -next 5/6] netfilter: Per network namespace netfilter hooks.

2015-07-15 Thread Pablo Neira Ayuso
On Fri, Jul 10, 2015 at 06:15:06PM -0500, Eric W. Biederman wrote: > @@ -102,13 +112,35 @@ int nf_register_hook(struct nf_hook_ops *reg) > #endif > return 0; > } > -EXPORT_SYMBOL(nf_register_hook); > +EXPORT_SYMBOL(nf_register_net_hook); > > -void nf_unregister_hook(struct nf_hook_ops *re

[PATCH -next 5/6] netfilter: Per network namespace netfilter hooks.

2015-07-10 Thread Eric W. Biederman
- Add a new set of functions for registering and unregistering per network namespace hooks. - Modify the old global namespace hook functions to use the per network namespace hooks in their implementation, so their remains a single list that needs to be walked for any hook (this is important