Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit aa3c487f authored by Jan Engelhardt's avatar Jan Engelhardt Committed by Patrick McHardy
Browse files

netfilter: xt_socket: make module available for INPUT chain 

This should make it possible to test for the existence of local
sockets in the INPUT path.

References: http://marc.info/?l=netfilter-devel&m=125380481517129&w=2



Signed-off-by: default avatarJan Engelhardt <jengelh@medozas.de>
Signed-off-by: default avatarBalazs Scheidler <bazsi@balabit.hu>
Signed-off-by: default avatarPatrick McHardy <kaber@trash.net>
parent ed3f2e40

net/netfilter/xt_socket.c

+4 −2
Original line number Diff line number Diff line
@@ -192,7 +192,8 @@ static struct xt_match socket_mt_reg[] __read_mostly = { 
		.revision	= 0,

		.family		= NFPROTO_IPV4,

		.match		= socket_mt_v0,

		.hooks		= 1 << NF_INET_PRE_ROUTING,

		.hooks		= (1 << NF_INET_PRE_ROUTING) |

				  (1 << NF_INET_LOCAL_IN),

		.me		= THIS_MODULE,

	},

	{
@@ -201,7 +202,8 @@ static struct xt_match socket_mt_reg[] __read_mostly = { 
		.family		= NFPROTO_IPV4,

		.match		= socket_mt_v1,

		.matchsize	= sizeof(struct xt_socket_mtinfo1),

		.hooks		= 1 << NF_INET_PRE_ROUTING,

		.hooks		= (1 << NF_INET_PRE_ROUTING) |

				  (1 << NF_INET_LOCAL_IN),

		.me		= THIS_MODULE,

	},

};