| /net/xfrm/ |
| D | xfrm_policy.c | 183 xfrm_policy_insert_list(struct hlist_head *chain, struct xfrm_policy *policy,
186 struct xfrm_policy *policy);
194 static inline bool xfrm_pol_hold_rcu(struct xfrm_policy *policy) in xfrm_pol_hold_rcu() argument
196 return refcount_inc_not_zero(&policy->refcnt); in xfrm_pol_hold_rcu()
392 struct xfrm_policy *policy; in xfrm_policy_alloc() local
394 policy = kzalloc(sizeof(struct xfrm_policy), gfp); in xfrm_policy_alloc()
396 if (policy) { in xfrm_policy_alloc()
397 write_pnet(&policy->xp_net, net); in xfrm_policy_alloc()
398 INIT_LIST_HEAD(&policy->walk.all); in xfrm_policy_alloc()
399 INIT_HLIST_NODE(&policy->bydst_inexact_list); in xfrm_policy_alloc()
[all …]
|
| D | Kconfig | 51 bool "Transformation sub policy support"
54 Support sub policy for developers. By using sub policy with main
|
| /net/netfilter/ |
| D | nf_tables_offload.c | 326 u8 policy; in nft_flow_offload_chain() local
336 policy = ppolicy ? *ppolicy : basechain->policy; in nft_flow_offload_chain()
339 if (cmd == FLOW_BLOCK_BIND && policy == NF_DROP) in nft_flow_offload_chain()
353 u8 policy; in nft_flow_rule_offload_commit() local
365 policy = nft_trans_chain_policy(trans); in nft_flow_rule_offload_commit()
366 err = nft_flow_offload_chain(trans->ctx.chain, &policy, in nft_flow_rule_offload_commit()
373 policy = nft_trans_chain_policy(trans); in nft_flow_rule_offload_commit()
374 err = nft_flow_offload_chain(trans->ctx.chain, &policy, in nft_flow_rule_offload_commit()
|
| D | nfnetlink_cthelper.c | 284 nfnl_cthelper_update_policy_one(const struct nf_conntrack_expect_policy *policy, in nfnl_cthelper_update_policy_one() argument
301 if (nla_strcmp(tb[NFCTH_POLICY_NAME], policy->name)) in nfnl_cthelper_update_policy_one()
319 struct nf_conntrack_expect_policy *policy; in nfnl_cthelper_update_policy_all() local
345 policy = (struct nf_conntrack_expect_policy *) in nfnl_cthelper_update_policy_all()
347 policy->max_expected = new_policy->max_expected; in nfnl_cthelper_update_policy_all()
348 policy->timeout = new_policy->timeout; in nfnl_cthelper_update_policy_all()
752 .policy = nfnl_cthelper_policy },
755 .policy = nfnl_cthelper_policy },
758 .policy = nfnl_cthelper_policy },
|
| D | nft_redir.c | 157 .policy = nft_redir_policy,
184 .policy = nft_redir_policy,
212 .policy = nft_redir_policy,
|
| D | nfnetlink_cttimeout.c | 540 .policy = cttimeout_nla_policy },
543 .policy = cttimeout_nla_policy },
546 .policy = cttimeout_nla_policy },
549 .policy = cttimeout_nla_policy },
552 .policy = cttimeout_nla_policy },
|
| D | nft_masq.c | 138 .policy = nft_masq_policy,
184 .policy = nft_masq_policy,
239 .policy = nft_masq_policy,
|
| D | nfnetlink_acct.c | 377 .policy = nfnl_acct_policy },
380 .policy = nfnl_acct_policy },
383 .policy = nfnl_acct_policy },
386 .policy = nfnl_acct_policy },
|
| D | nf_tables_api.c | 1458 htonl(basechain->policy))) in nf_tables_fill_chain_info()
1810 u8 policy, u32 flags) in nf_tables_addchain() argument
1865 basechain->policy = NF_ACCEPT; in nf_tables_addchain()
1921 nft_trans_chain_policy(trans) = policy; in nf_tables_addchain()
1936 static int nf_tables_updchain(struct nft_ctx *ctx, u8 genmask, u8 policy, in nf_tables_updchain() argument
2006 nft_trans_chain_policy(trans) = policy; in nf_tables_updchain()
2056 u8 policy = NF_ACCEPT; in nf_tables_newchain() local
2104 policy = ntohl(nla_get_be32(nla[NFTA_CHAIN_POLICY])); in nf_tables_newchain()
2105 switch (policy) { in nf_tables_newchain()
2130 return nf_tables_updchain(&ctx, genmask, policy, flags); in nf_tables_newchain()
[all …]
|
| D | nft_quota.c | 179 .policy = nft_quota_policy,
220 .policy = nft_quota_policy,
|
| D | nft_connlimit.c | 161 .policy = nft_connlimit_policy,
246 .policy = nft_connlimit_policy,
|
| D | nft_counter.c | 190 .policy = nft_counter_policy,
266 .policy = nft_counter_policy,
|
| D | nft_fib_netdev.c | 67 .policy = nft_fib_policy,
|
| D | nft_fib_inet.c | 58 .policy = nft_fib_policy,
|
| D | nft_nat.c | 272 .policy = nft_nat_policy,
303 .policy = nft_nat_policy,
|
| D | nft_dup_netdev.c | 90 .policy = nft_dup_netdev_policy,
|
| D | nft_limit.c | 233 .policy = nft_limit_policy,
340 .policy = nft_limit_policy,
|
| /net/bridge/netfilter/ |
| D | ebtable_filter.c | 22 .policy = EBT_ACCEPT,
26 .policy = EBT_ACCEPT,
30 .policy = EBT_ACCEPT,
|
| D | ebtable_nat.c | 22 .policy = EBT_ACCEPT,
26 .policy = EBT_ACCEPT,
30 .policy = EBT_ACCEPT,
|
| D | ebtable_broute.c | 26 .policy = EBT_ACCEPT,
|
| /net/netfilter/ipset/ |
| D | ip_set_core.c | 1994 .policy = ip_set_create_policy,
1999 .policy = ip_set_setname_policy,
2004 .policy = ip_set_setname_policy,
2009 .policy = ip_set_setname2_policy,
2014 .policy = ip_set_setname2_policy,
2019 .policy = ip_set_dump_policy,
2024 .policy = ip_set_setname_policy,
2029 .policy = ip_set_adt_policy,
2034 .policy = ip_set_adt_policy,
2039 .policy = ip_set_adt_policy,
[all …]
|
| /net/ipv6/netfilter/ |
| D | nft_reject_ipv6.c | 54 .policy = nft_reject_policy,
|
| D | nft_dup_ipv6.c | 87 .policy = nft_dup_ipv6_policy,
|
| /net/ipv4/netfilter/ |
| D | nft_reject_ipv4.c | 53 .policy = nft_reject_policy,
|
| /net/ipv6/ila/ |
| D | ila_main.c | 52 .policy = ila_nl_policy,
|