| commit | 2a43ecf96ba6a6eed70dbcd99d0888fc0ad3b82b | [log] [tgz] |
|---|---|---|
| author | Florian Westphal <fw@strlen.de> | Wed Jul 11 13:45:13 2018 +0200 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Wed Jul 18 11:26:47 2018 +0200 |
| tree | c11616a1dfa43ce19cb49d881e5f27e61de2e429 | |
| parent | be2ab5b4d5c0bf041a34ec2e1397d50afbfb095e [diff] |
netfilter: nf_tables: avoid global info storage This works because all accesses are currently serialized by nfnl nf_tables subsys mutex. If we want to have per-netns locking, we need to make this scratch area pernetns or allocate it on demand. This does the latter, its ~28kbyte but we can fallback to vmalloc so it should be fine. Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>