tree 7214567e055edfd65fcf229c4625397b294c65d9
parent 97d7f1c7c0f0b91e299e87b94c40829c9e0fe47d
author Willem de Bruijn <willemb@google.com> 1481059502 -0500
committer Chenbo Feng <fengc@google.com> 1521052758 -0700

UPSTREAM: netfilter: xt_bpf: support ebpf

Add support for attaching an eBPF object by file descriptor.

The iptables binary can be called with a path to an elf object or a
pinned bpf object. Also pass the mode and path to the kernel to be
able to return it later for iptables dump and save.

Signed-off-by: Willem de Bruijn <willemb@google.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Chenbo Feng <fengc@google.com>
(cherry picked from commit 2c16d60332643e90d4fa244f4a706c454b8c7569)

Change-Id: I31b8831a7ffd7c44985ee906ff194c1d934dafbe