expr: meta: introduce ibrhwaddr meta expression

Signed-off-by: Fernando Fernandez Mancera <fmancera@suse.de>
Signed-off-by: Florian Westphal <fw@strlen.de>

diff --git a/include/linux/netfilter/nf_tables.h b/include/linux/netfilter/nf_tables.h
index 8e0eb832bc01ec2541eba004a94a3741c538666e..7c0c915f030688e5b652e8ab66e072c256813c0e 100644 (file)
--- a/include/linux/netfilter/nf_tables.h
+++ b/include/linux/netfilter/nf_tables.h
@@ -959,6 +959,7 @@ enum nft_exthdr_attributes {
  * @NFT_META_SDIF: slave device interface index
  * @NFT_META_SDIFNAME: slave device interface name
  * @NFT_META_BRI_BROUTE: packet br_netfilter_broute bit
+ * @NFT_META_BRI_IIFHWADDR: packet input bridge interface ethernet address
  */
 enum nft_meta_keys {
        NFT_META_LEN,
@@ -999,6 +1000,7 @@ enum nft_meta_keys {
        NFT_META_SDIFNAME,
        NFT_META_BRI_BROUTE,
        __NFT_META_IIFTYPE,
+       NFT_META_BRI_IIFHWADDR,
 };
 
 /**

diff --git a/src/expr/meta.c b/src/expr/meta.c
index d1ff6c4d2339b40c2ac43514047310186277078e..7c56fdca08451034f5b4fe83bc777f55ee5d9ca0 100644 (file)
--- a/src/expr/meta.c
+++ b/src/expr/meta.c
@@ -18,7 +18,7 @@
 #include <libnftnl/rule.h>
 
 #ifndef NFT_META_MAX
-#define NFT_META_MAX (NFT_META_BRI_BROUTE + 1)
+#define NFT_META_MAX (NFT_META_BRI_IIFHWADDR + 1)
 #endif
 
 struct nftnl_expr_meta {
@@ -163,6 +163,7 @@ static const char *meta_key2str_array[NFT_META_MAX] = {
        [NFT_META_SDIF]         = "sdif",
        [NFT_META_SDIFNAME]     = "sdifname",
        [NFT_META_BRI_BROUTE]   = "broute",
+       [NFT_META_BRI_IIFHWADDR] = "ibrhwaddr",
 };
 
 static const char *meta_key2str(uint8_t key)