netfilter: nf_tables: place all set backends in one single module
authorPablo Neira Ayuso <pablo@netfilter.org>
Fri, 6 Jul 2018 17:06:43 +0000 (19:06 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Fri, 6 Jul 2018 17:31:53 +0000 (19:31 +0200)
commite240cd0df48185a28c153f83a39ba3940e3e9b86
tree7e480025afd8ed7f00b22e35f63ff434e853a634
parent5711b4e89319c2912f20b2a4f371c1525fc9551d
netfilter: nf_tables: place all set backends in one single module

This patch disallows rbtree with single elements, which is causing
problems with the recent timeout support. Before this patch, you
could opt out individual set representations per module, which is
just adding extra complexity.

Fixes: 8d8540c4f5e0("netfilter: nft_set_rbtree: add timeout support")
Reported-by: Taehee Yoo <ap420073@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/net/netfilter/nf_tables_core.h
net/netfilter/Kconfig
net/netfilter/Makefile
net/netfilter/nf_tables_set_core.c [new file with mode: 0644]
net/netfilter/nft_set_bitmap.c
net/netfilter/nft_set_hash.c
net/netfilter/nft_set_rbtree.c