1 #include <linux/types.h> 2 #include <net/net_namespace.h> 3 #include <linux/netfilter/nf_conntrack_common.h> 4 #include <linux/netfilter/nf_conntrack_tuple_common.h> 5 #include <net/netfilter/nf_conntrack.h> 6 #include <net/netfilter/nf_conntrack_extend.h> 7 8 #include <uapi/linux/netfilter/xt_connlabel.h> 9 10 #define NF_CT_LABELS_MAX_SIZE ((XT_CONNLABEL_MAXBIT + 1) / BITS_PER_BYTE) 11 12 struct nf_conn_labels { 13 unsigned long bits[NF_CT_LABELS_MAX_SIZE / sizeof(long)]; 14 }; 15 16 static inline struct nf_conn_labels *nf_ct_labels_find(const struct nf_conn *ct) 17 { 18 #ifdef CONFIG_NF_CONNTRACK_LABELS 19 return nf_ct_ext_find(ct, NF_CT_EXT_LABELS); 20 #else 21 return NULL; 22 #endif 23 } 24 25 static inline struct nf_conn_labels *nf_ct_labels_ext_add(struct nf_conn *ct) 26 { 27 #ifdef CONFIG_NF_CONNTRACK_LABELS 28 struct net *net = nf_ct_net(ct); 29 30 if (net->ct.labels_used == 0) 31 return NULL; 32 33 return nf_ct_ext_add_length(ct, NF_CT_EXT_LABELS, 34 sizeof(struct nf_conn_labels), GFP_ATOMIC); 35 #else 36 return NULL; 37 #endif 38 } 39 40 int nf_connlabels_replace(struct nf_conn *ct, 41 const u32 *data, const u32 *mask, unsigned int words); 42 43 #ifdef CONFIG_NF_CONNTRACK_LABELS 44 int nf_conntrack_labels_init(void); 45 void nf_conntrack_labels_fini(void); 46 int nf_connlabels_get(struct net *net, unsigned int bit); 47 void nf_connlabels_put(struct net *net); 48 #else 49 static inline int nf_conntrack_labels_init(void) { return 0; } 50 static inline void nf_conntrack_labels_fini(void) {} 51 static inline int nf_connlabels_get(struct net *net, unsigned int bit) { return 0; } 52 static inline void nf_connlabels_put(struct net *net) {} 53 #endif 54