expr: remove secmark from ct and meta expression

The secctx should be used instead of the secmark. Remove for now.

Signed-off-by: Patrick McHardy <kaber@trash.net>

diff --git a/src/ct.c b/src/ct.c
index e5ca593ccfc72dbce9ed3d35ec8538220d175f1d..c7849fb0c75da8304a14209937848ccad8fa699d 100644 (file)
--- a/src/ct.c
+++ b/src/ct.c
@@ -103,9 +103,6 @@ static const struct ct_template ct_templates[] = {
        [NFT_CT_MARK]           = CT_TEMPLATE("mark",       &mark_type,
                                              BYTEORDER_HOST_ENDIAN,
                                              4 * BITS_PER_BYTE),
-       [NFT_CT_SECMARK]        = CT_TEMPLATE("secmark",    &integer_type,
-                                             BYTEORDER_HOST_ENDIAN,
-                                             4 * BITS_PER_BYTE),
        [NFT_CT_EXPIRATION]     = CT_TEMPLATE("expiration", &time_type,
                                              BYTEORDER_HOST_ENDIAN,
                                              4 * BITS_PER_BYTE),

diff --git a/src/meta.c b/src/meta.c
index 32f301219cb0f2bf18d58b55baa0778cd7993192..3d84c509e5683b40a2db4c5fa0ee8b9778b3daec 100644 (file)
--- a/src/meta.c
+++ b/src/meta.c
@@ -327,8 +327,6 @@ static const struct meta_template meta_templates[] = {
                                                1    , BYTEORDER_HOST_ENDIAN),
        [NFT_META_RTCLASSID]    = META_TEMPLATE("rtclassid", &realm_type,
                                                4 * 8, BYTEORDER_HOST_ENDIAN),
-       [NFT_META_SECMARK]      = META_TEMPLATE("secmark",   &integer_type,
-                                               4 * 8, BYTEORDER_HOST_ENDIAN),
 };
 
 static void meta_expr_print(const struct expr *expr)

diff --git a/src/parser.y b/src/parser.y
index 461eb3f9636047e001753bcb1d1296f16dbd17c9..86dfe3e81f8f95bcdf9f4e58b9bba39433415d66 100644 (file)
--- a/src/parser.y
+++ b/src/parser.y
@@ -291,7 +291,6 @@ static void location_update(struct location *loc, struct location *rhs, int n)
 %token SKGID                   "skgid"
 %token NFTRACE                 "nftrace"
 %token RTCLASSID               "rtclassid"
-%token SECMARK                 "secmark"
 
 %token CT                      "ct"
 %token DIRECTION               "direction"
@@ -1329,7 +1328,6 @@ meta_key          :       LENGTH          { $$ = NFT_META_LEN; }
                        |       SKGID           { $$ = NFT_META_SKGID; }
                        |       NFTRACE         { $$ = NFT_META_NFTRACE; }
                        |       RTCLASSID       { $$ = NFT_META_RTCLASSID; }
-                       |       SECMARK         { $$ = NFT_META_SECMARK; }
                        ;
 
 meta_stmt              :       META    meta_key        SET     expr
@@ -1348,7 +1346,6 @@ ct_key                    :       STATE           { $$ = NFT_CT_STATE; }
                        |       DIRECTION       { $$ = NFT_CT_DIRECTION; }
                        |       STATUS          { $$ = NFT_CT_STATUS; }
                        |       MARK            { $$ = NFT_CT_MARK; }
-                       |       SECMARK         { $$ = NFT_CT_SECMARK; }
                        |       EXPIRATION      { $$ = NFT_CT_EXPIRATION; }
                        |       HELPER          { $$ = NFT_CT_HELPER; }
                        |       L3PROTOCOL      { $$ = NFT_CT_L3PROTOCOL; }

diff --git a/src/scanner.l b/src/scanner.l
index 66735b110e47ab36270c44130dfce7dfc36c8cd3..936c035eee6107f826bc23fe23d4e2275da19710 100644 (file)
--- a/src/scanner.l
+++ b/src/scanner.l
@@ -386,7 +386,6 @@ addrstring  ({macaddr}|{ip4addr}|{ip6addr})
 "skgid"                        { return SKGID; }
 "nftrace"              { return NFTRACE; }
 "rtclassid"            { return RTCLASSID; }
-"secmark"              { return SECMARK; }
 
 "ct"                   { return CT; }
 "direction"            { return DIRECTION; }