diff options
| author | Florian Westphal <fw@strlen.de> | 2025-07-07 22:32:44 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2025-07-14 15:22:35 +0200 |
| commit | 6ac86ac74e3a0608424240cc1ce813ad6e8a73dd (patch) | |
| tree | 9c47fed4cb0f25ca4d7086777ca7a9f60eabd136 /scripts/lib | |
| parent | 6dc2fae7f8a2384304ef48b7cdcb988222102a54 (diff) | |
netfilter: nf_tables: hide clash bit from userspace
Its a kernel implementation detail, at least at this time:
We can later decide to revert this patch if there is a compelling
reason, but then we should also remove the ifdef that prevents exposure
of ip_conntrack_status enum IPS_NAT_CLASH value in the uapi header.
Clash entries are not included in dumps (true for both old /proc
and ctnetlink) either. So for now exclude the clash bit when dumping.
Fixes: 7e5c6aa67e6f ("netfilter: nf_tables: add packets conntrack state to debug trace info")
Link: https://lore.kernel.org/netfilter-devel/aGwf3dCggwBlRKKC@strlen.de/
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'scripts/lib')
0 files changed, 0 insertions, 0 deletions