]> git.ipfire.org Git - thirdparty/iptables.git/commit
extensions: libxt_bpf: support ebpf pinned objects
authorWillem de Bruijn <willemb@google.com>
Thu, 8 Dec 2016 22:09:38 +0000 (17:09 -0500)
committerPablo Neira Ayuso <pablo@netfilter.org>
Sat, 10 Dec 2016 13:04:28 +0000 (14:04 +0100)
commitf17f9ace8a84f6986235fc2d0fedc1fd5148a3bd
treed6bb856a7278cb57c8280fb18f8685ae894b554a
parentbb50942a62b2d76810babc0b1150895d9e5ef229
extensions: libxt_bpf: support ebpf pinned objects

Exercise the new kernel feature introduced in commit 2c16d6033264
("netfilter: xt_bpf: support ebpf") to load pinned eBPF programs.

The new interface allows instantiating a bpf match using

  -m bpf --object-pinned ${PATH}

where ${PATH} points to a node in a bpf virtual filesystem. See
also the revised man page.

Signed-off-by: Willem de Bruijn <willemb@google.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
configure.ac
extensions/libxt_bpf.c
extensions/libxt_bpf.man
include/linux/netfilter/xt_bpf.h