src: meta: add prandom support

Signed-off-by: Florian Westphal <fw@strlen.de>

diff --git a/include/linux/netfilter/nf_tables.h b/include/linux/netfilter/nf_tables.h
index b2507998960751f8b063089c65ca0f6ca037244a..e233d3a5d4a2d283a56200b86d7a783fb554548a 100644 (file)
--- a/include/linux/netfilter/nf_tables.h
+++ b/include/linux/netfilter/nf_tables.h
@@ -679,6 +679,7 @@ enum nft_exthdr_attributes {
  * @NFT_META_IIFGROUP: packet input interface group
  * @NFT_META_OIFGROUP: packet output interface group
  * @NFT_META_CGROUP: socket control group (skb->sk->sk_classid)
+ * @NFT_META_PRANDOM: a 32bit pseudo-random number
  */
 enum nft_meta_keys {
        NFT_META_LEN,
@@ -705,6 +706,7 @@ enum nft_meta_keys {
        NFT_META_IIFGROUP,
        NFT_META_OIFGROUP,
        NFT_META_CGROUP,
+       NFT_META_PRANDOM,
 };
 
 /**

diff --git a/src/expr/meta.c b/src/expr/meta.c
index 546b2255ee15c96c29f5b5c6185ed05ffbb6ca83..060c7041f0e834b5c1559697cee945a1eeab88bc 100644 (file)
--- a/src/expr/meta.c
+++ b/src/expr/meta.c
@@ -22,7 +22,7 @@
 #include <libnftnl/rule.h>
 
 #ifndef NFT_META_MAX
-#define NFT_META_MAX (NFT_META_CGROUP + 1)
+#define NFT_META_MAX (NFT_META_PRANDOM + 1)
 #endif
 
 struct nftnl_expr_meta {
@@ -157,6 +157,7 @@ static const char *meta_key2str_array[NFT_META_MAX] = {
        [NFT_META_IIFGROUP]     = "iifgroup",
        [NFT_META_OIFGROUP]     = "oifgroup",
        [NFT_META_CGROUP]       = "cgroup",
+       [NFT_META_PRANDOM]      = "prandom",
 };
 
 static const char *meta_key2str(uint8_t key)