Show patches with: Archived = No       |   29187 patches
« 1 2 3 4291 292 »
Patch Series A/F/R/T S/W/F Date Submitter Delegate State
[net-next,7/9] netfilter: nf_tables: pass context structure to nft_parse_register_load [net-next,1/9] netfilter: nfnetlink_queue: unbreak SCTP traffic - - - - --- 2024-08-22 Pablo Neira Ayuso Accepted
[net-next,6/9] netfilter: move nf_ct_netns_get out of nf_conncount_init [net-next,1/9] netfilter: nfnetlink_queue: unbreak SCTP traffic - - 1 - --- 2024-08-22 Pablo Neira Ayuso Accepted
[net-next,5/9] netfilter: nf_tables: do not remove elements if set backend implements .abort [net-next,1/9] netfilter: nfnetlink_queue: unbreak SCTP traffic - - - - --- 2024-08-22 Pablo Neira Ayuso Accepted
[net-next,4/9] netfilter: nf_tables: store new sets in dedicated list [net-next,1/9] netfilter: nfnetlink_queue: unbreak SCTP traffic - 1 - - --- 2024-08-22 Pablo Neira Ayuso Accepted
[net-next,3/9] netfilter: nfnetlink: convert kfree_skb to consume_skb [net-next,1/9] netfilter: nfnetlink_queue: unbreak SCTP traffic - - - - --- 2024-08-22 Pablo Neira Ayuso Accepted
[net-next,2/9] selftests: netfilter: nft_queue.sh: sctp coverage [net-next,1/9] netfilter: nfnetlink_queue: unbreak SCTP traffic - - - - --- 2024-08-22 Pablo Neira Ayuso Accepted
[net-next,1/9] netfilter: nfnetlink_queue: unbreak SCTP traffic [net-next,1/9] netfilter: nfnetlink_queue: unbreak SCTP traffic - - - - --- 2024-08-22 Pablo Neira Ayuso Accepted
[net-next,0/9] Netfilter updates for net-next - - - - --- 2024-08-22 Pablo Neira Ayuso Accepted
[nf-next,2/2] netfilter: Make IP6_NF_IPTABLES_LEGACY selectable [nf-next,1/2] netfilter: Make IP_NF_IPTABLES_LEGACY selectable - - - - --- 2024-08-22 Breno Leitao Changes Requested
[nf-next,1/2] netfilter: Make IP_NF_IPTABLES_LEGACY selectable [nf-next,1/2] netfilter: Make IP_NF_IPTABLES_LEGACY selectable - - - - --- 2024-08-22 Breno Leitao Changes Requested
[kernel] nf_tables_ipv4: fix transport header offset comparison [kernel] nf_tables_ipv4: fix transport header offset comparison - - - - --- 2024-08-22 Jorge Ortiz Escribano Changes Requested
[net,3/3] netfilter: flowtable: validate vlan header [net,1/3] netfilter: nft_counter: Disable BH in nft_counter_offload_stats(). - 1 - - --- 2024-08-22 Pablo Neira Ayuso Accepted
[net,2/3] netfilter: nft_counter: Synchronize nft_counter_reset() against reader. [net,1/3] netfilter: nft_counter: Disable BH in nft_counter_offload_stats(). - 1 1 - --- 2024-08-22 Pablo Neira Ayuso Accepted
[net,1/3] netfilter: nft_counter: Disable BH in nft_counter_offload_stats(). [net,1/3] netfilter: nft_counter: Disable BH in nft_counter_offload_stats(). - 1 1 - --- 2024-08-22 Pablo Neira Ayuso Accepted
[net,v2,0/3] Netfilter fixes for net - - - - --- 2024-08-22 Pablo Neira Ayuso Accepted
netfilter: Don't track counter updates of do_add_counters() netfilter: Don't track counter updates of do_add_counters() - - - - --- 2024-08-22 takakura@valinux.co.jp Not Applicable
[net,3/3] netfilter: flowtable: validate vlan header [net,1/3] netfilter: nft_counter: Disable BH in nft_counter_offload_stats(). - 1 - - --- 2024-08-22 Pablo Neira Ayuso Changes Requested
[net,2/3] netfilter: nft_counter: Synchronize nft_counter_reset() against reader. [net,1/3] netfilter: nft_counter: Disable BH in nft_counter_offload_stats(). - 1 1 - --- 2024-08-22 Pablo Neira Ayuso Changes Requested
[net,1/3] netfilter: nft_counter: Disable BH in nft_counter_offload_stats(). [net,1/3] netfilter: nft_counter: Disable BH in nft_counter_offload_stats(). - 1 1 - --- 2024-08-22 Pablo Neira Ayuso Changes Requested
[net,0/3] Netfilter fixes for net - - - - --- 2024-08-22 Pablo Neira Ayuso Changes Requested
[nf,v2] netfilter: flowtable: validate vlan header [nf,v2] netfilter: flowtable: validate vlan header - 1 - - --- 2024-08-21 Pablo Neira Ayuso Changes Requested
[nf-next,3/3] netfilter: nf_tables: don't initialize registers in nft_do_chain() netfilter: nf_tables: reject loads from - - - - --- 2024-08-20 Florian Westphal Accepted
[nf-next,2/3] netfilter: nf_tables: allow loads only when register is initialized netfilter: nf_tables: reject loads from - - - - --- 2024-08-20 Florian Westphal Accepted
[nf-next,1/3] netfilter: nf_tables: pass context structure to nft_parse_register_load netfilter: nf_tables: reject loads from - - - - --- 2024-08-20 Florian Westphal Accepted
[net-next,3/3] netfilter: nft_counter: Use u64_stats_t for statistic. netfilter: nft_counter: Statistics fixes/ optimisation. - - - - --- 2024-08-20 Sebastian Andrzej Siewior Accepted
[net,2/3] netfilter: nft_counter: Synchronize nft_counter_reset() against reader. netfilter: nft_counter: Statistics fixes/ optimisation. - 1 - - --- 2024-08-20 Sebastian Andrzej Siewior Accepted
[net,1/3] netfilter: nft_counter: Disable BH in nft_counter_offload_stats(). netfilter: nft_counter: Statistics fixes/ optimisation. - 1 - - --- 2024-08-20 Sebastian Andrzej Siewior Accepted
[bpf-next] bpf: use kfunc hooks instead of program types [bpf-next] bpf: use kfunc hooks instead of program types - - - - --- 2024-08-20 Matteo Croce Handled Elsewhere
[nft,4/4] parser_json: fix crash in json_parse_set_stmt_list fixes for json parser - 1 - - --- 2024-08-19 Pablo Neira Ayuso Accepted
[nft,3/4] parser_json: fix handle memleak from error path fixes for json parser - 1 - - --- 2024-08-19 Pablo Neira Ayuso Accepted
[nft,2/4] parser_json: fix several expression memleaks from error path fixes for json parser - 1 - - --- 2024-08-19 Pablo Neira Ayuso Accepted
[nft,1/4] parser_json: release buffer returned by json_dumps fixes for json parser - 1 - - --- 2024-08-19 Pablo Neira Ayuso Accepted
[nft,2/2] datatype: replace DTYPE_F_ALLOC by bitfield [nft,1/2] src: remove DTYPE_F_PREFIX - - - - --- 2024-08-19 Pablo Neira Ayuso Accepted
[nft,1/2] src: remove DTYPE_F_PREFIX [nft,1/2] src: remove DTYPE_F_PREFIX - - - - --- 2024-08-19 Pablo Neira Ayuso Accepted
[RFC,v1,4/4] selftests/landlock: Add realworld workload based on find tool Implement performance impact measurement tool - - - - --- 2024-08-16 Mikhail Ivanov RFC
[RFC,v1,3/4] selftests/landlock: Implement custom libbpf-based tracer Implement performance impact measurement tool - - - - --- 2024-08-16 Mikhail Ivanov RFC
[RFC,v1,2/4] selftests/landlock: Implement per-syscall microbenchmarks Implement performance impact measurement tool - - - - --- 2024-08-16 Mikhail Ivanov RFC
[RFC,v1,1/4] selftests/landlock: Implement performance impact measurement tool Implement performance impact measurement tool - - - - --- 2024-08-16 Mikhail Ivanov RFC
[nft] cache: revisit reset command flags [nft] cache: revisit reset command flags - 1 - - --- 2024-08-15 Pablo Neira Ayuso Changes Requested
[nft] parser_bison: allow 0 burst in limit rate byte mode [nft] parser_bison: allow 0 burst in limit rate byte mode - 2 - - --- 2024-08-15 Pablo Neira Ayuso Accepted
[nft,5/5] cache: do not fetch set inconditionally on delete relax cache requirements, speed up incremental updates - - - - --- 2024-08-15 Pablo Neira Ayuso Accepted
[nft,4/5] cache: populate flowtable on demand from error path relax cache requirements, speed up incremental updates - - - - --- 2024-08-15 Pablo Neira Ayuso Accepted
[nft,3/5] cache: populate objecs on demand from error path relax cache requirements, speed up incremental updates - - - - --- 2024-08-15 Pablo Neira Ayuso Accepted
[nft,2/5] cache: populate chains on demand from error path relax cache requirements, speed up incremental updates - - - - --- 2024-08-15 Pablo Neira Ayuso Accepted
[nft,1/5] cache: rule by index requires full cache relax cache requirements, speed up incremental updates - - - - --- 2024-08-15 Pablo Neira Ayuso Accepted
[nft] tests: shell: add a few tests for nft -i [nft] tests: shell: add a few tests for nft -i - - - - --- 2024-08-15 Pablo Neira Ayuso Accepted
netfilter: nfnetlink: fix uninitialized local variable netfilter: nfnetlink: fix uninitialized local variable - 1 - - --- 2024-08-15 icejl Not Applicable
[nft] cache: populate chains on demand from error path [nft] cache: populate chains on demand from error path - - - - --- 2024-08-14 Pablo Neira Ayuso Changes Requested
[net-next,v2,3/3] ipv4: Centralize TOS matching Preparations for FIB rule DSCP selector - - 1 - --- 2024-08-14 Ido Schimmel Handled Elsewhere
[net-next,v2,2/3] netfilter: nft_fib: Mask upper DSCP bits before FIB lookup Preparations for FIB rule DSCP selector - - 1 - --- 2024-08-14 Ido Schimmel Handled Elsewhere
[net-next,v2,1/3] ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family Preparations for FIB rule DSCP selector - - 1 - --- 2024-08-14 Ido Schimmel Handled Elsewhere
[nft,v2,2/2] datatype: improve error reporting when time unit is not correct [nft,v2,1/2] datatype: reject rate in quota statement - 1 - - --- 2024-08-14 Pablo Neira Ayuso Accepted
[nft,v2,1/2] datatype: reject rate in quota statement [nft,v2,1/2] datatype: reject rate in quota statement - 1 - - --- 2024-08-14 Pablo Neira Ayuso Accepted
[nft,2/2] datatype: improve error reporting when time unit is not correct [nft,1/2] datatype: replace strncmp() by strcmp() in unit parser - 1 - - --- 2024-08-14 Pablo Neira Ayuso Changes Requested
[nft,1/2] datatype: replace strncmp() by strcmp() in unit parser [nft,1/2] datatype: replace strncmp() by strcmp() in unit parser - 1 - - --- 2024-08-14 Pablo Neira Ayuso Changes Requested
tests: shell: skip vlan mangling testcase if egress is not support tests: shell: skip vlan mangling testcase if egress is not support - - - - --- 2024-08-14 Pablo Neira Ayuso Accepted
[RFC,v2,9/9] samples/landlock: Support LANDLOCK_ACCESS_NET_LISTEN Support TCP listen access-control - - - - --- 2024-08-14 Mikhail Ivanov RFC
[RFC,v2,8/9] selftests/landlock: Test changing socket backlog with listen(2) Support TCP listen access-control - - - - --- 2024-08-14 Mikhail Ivanov RFC
[RFC,v2,7/9] selftests/landlock: Test listen on ULP socket without clone method Support TCP listen access-control - - - - --- 2024-08-14 Mikhail Ivanov RFC
[RFC,v2,6/9] selftests/landlock: Test listening without explicit bind restriction Support TCP listen access-control - - - - --- 2024-08-14 Mikhail Ivanov RFC
[RFC,v2,5/9] selftests/landlock: Test listen on connected socket Support TCP listen access-control - - - - --- 2024-08-14 Mikhail Ivanov RFC
[RFC,v2,4/9] selftests/landlock: Test listening restriction Support TCP listen access-control - - - - --- 2024-08-14 Mikhail Ivanov RFC
[RFC,v2,3/9] selftests/landlock: Support LANDLOCK_ACCESS_NET_LISTEN_TCP Support TCP listen access-control - - - - --- 2024-08-14 Mikhail Ivanov RFC
[RFC,v2,2/9] landlock: Support TCP listen access-control Support TCP listen access-control - - - - --- 2024-08-14 Mikhail Ivanov RFC
[RFC,v2,1/9] landlock: Refactor current_check_access_socket() access right check Support TCP listen access-control - - - - --- 2024-08-14 Mikhail Ivanov RFC
[nft] tests: shell: Extend table persist flag test a bit [nft] tests: shell: Extend table persist flag test a bit - - - - --- 2024-08-13 Phil Sutter Accepted
[nf] netfilter: flowtable: validate vlan header [nf] netfilter: flowtable: validate vlan header - 1 - - --- 2024-08-13 Pablo Neira Ayuso Changes Requested
[-stable,4.19.x,3/3] netfilter: nf_tables: prefer nft_chain_validate Netfilter fixes for -stable - 1 - - --- 2024-08-12 Pablo Neira Ayuso Awaiting Upstream
[-stable,4.19.x,2/3] netfilter: nf_tables: use timestamp to check for set element timeout Netfilter fixes for -stable - 1 - - --- 2024-08-12 Pablo Neira Ayuso Awaiting Upstream
[-stable,4.19.x,1/3] netfilter: nf_tables: set element extended ACK reporting support Netfilter fixes for -stable - - - - --- 2024-08-12 Pablo Neira Ayuso Awaiting Upstream
[-stable,5.4.x,3/3] netfilter: nf_tables: prefer nft_chain_validate Netfilter fixes for -stable - 1 - - --- 2024-08-12 Pablo Neira Ayuso Awaiting Upstream
[-stable,5.4.x,2/3] netfilter: nf_tables: use timestamp to check for set element timeout Netfilter fixes for -stable - 1 - - --- 2024-08-12 Pablo Neira Ayuso Awaiting Upstream
[-stable,5.4.x,1/3] netfilter: nf_tables: set element extended ACK reporting support Netfilter fixes for -stable - - - - --- 2024-08-12 Pablo Neira Ayuso Awaiting Upstream
[-stable,5.10.x,4/4] netfilter: nf_tables: prefer nft_chain_validate Netfilter fixes for -stable - 1 - - --- 2024-08-12 Pablo Neira Ayuso Awaiting Upstream
[-stable,5.10.x,3/4] netfilter: nf_tables: allow clone callbacks to sleep Netfilter fixes for -stable - - - - --- 2024-08-12 Pablo Neira Ayuso Awaiting Upstream
[-stable,5.10.x,2/4] netfilter: nf_tables: use timestamp to check for set element timeout Netfilter fixes for -stable - 1 - - --- 2024-08-12 Pablo Neira Ayuso Awaiting Upstream
[-stable,5.10.x,1/4] netfilter: nf_tables: set element extended ACK reporting support Netfilter fixes for -stable - - - - --- 2024-08-12 Pablo Neira Ayuso Awaiting Upstream
[-stable,5.15.x,5/5] netfilter: nf_tables: prefer nft_chain_validate Netfilter fixes for -stable - 1 - - --- 2024-08-12 Pablo Neira Ayuso Awaiting Upstream
[-stable,5.15.x,4/5] netfilter: nf_tables: allow clone callbacks to sleep Netfilter fixes for -stable - - - - --- 2024-08-12 Pablo Neira Ayuso Awaiting Upstream
[-stable,5.15.x,3/5] netfilter: nf_tables: bail out if stateful expression provides no .clone Netfilter fixes for -stable - - - - --- 2024-08-12 Pablo Neira Ayuso Awaiting Upstream
[-stable,5.15.x,2/5] netfilter: nf_tables: use timestamp to check for set element timeout Netfilter fixes for -stable - 1 - - --- 2024-08-12 Pablo Neira Ayuso Awaiting Upstream
[-stable,5.15.x,1/5] netfilter: nf_tables: set element extended ACK reporting support Netfilter fixes for -stable - - - - --- 2024-08-12 Pablo Neira Ayuso Awaiting Upstream
[-stable,6.1.x,3/3] netfilter: nf_tables: prefer nft_chain_validate Netfilter fixes for -stable - 1 - - --- 2024-08-12 Pablo Neira Ayuso Awaiting Upstream
[-stable,6.1.x,2/3] netfilter: nf_tables: allow clone callbacks to sleep Netfilter fixes for -stable - - - - --- 2024-08-12 Pablo Neira Ayuso Awaiting Upstream
[-stable,6.1.x,1/3] netfilter: nf_tables: bail out if stateful expression provides no .clone Netfilter fixes for -stable - - - - --- 2024-08-12 Pablo Neira Ayuso Awaiting Upstream
[-stable,6.6.x,1/1] netfilter: nf_tables: prefer nft_chain_validate Netfilter fixes for -stable - 1 - - --- 2024-08-12 Pablo Neira Ayuso Awaiting Upstream
netfilter: nfnetlink_log: remove unnecessary check in __build_packet_message() netfilter: nfnetlink_log: remove unnecessary check in __build_packet_message() - - 1 - --- 2024-08-09 Roman Smirnov Changes Requested
[nft] src: add never expires marker for element timeout [nft] src: add never expires marker for element timeout - - - - --- 2024-08-07 Pablo Neira Ayuso Changes Requested
[nf-next,8/8] netfilter: nf_tables: set element timeout update support nf_tables: support for updating set element timeout - - - - --- 2024-08-07 Pablo Neira Ayuso Changes Requested
[nf-next,7/8] netfilter: nf_tables: add never expires marker to elements nf_tables: support for updating set element timeout - - - - --- 2024-08-07 Pablo Neira Ayuso Changes Requested
[nf-next,6/8] netfilter: nf_tables: consolidate timeout extension for elements nf_tables: support for updating set element timeout - - - - --- 2024-08-07 Pablo Neira Ayuso Changes Requested
[nf-next,5/8] netfilter: nf_tables: annotate data-races around element expiration nf_tables: support for updating set element timeout - - - - --- 2024-08-07 Pablo Neira Ayuso Changes Requested
[nf-next,4/8] netfilter: nft_dynset: annotate data-races around set timeout nf_tables: support for updating set element timeout - 1 - - --- 2024-08-07 Pablo Neira Ayuso Changes Requested
[nf-next,3/8] netfilter: nf_tables: remove annotation to access set timeout while holding lock nf_tables: support for updating set element timeout - - - - --- 2024-08-07 Pablo Neira Ayuso Changes Requested
[nf-next,2/8] netfilter: nf_tables: reject element expiration with no timeout nf_tables: support for updating set element timeout - 1 - - --- 2024-08-07 Pablo Neira Ayuso Changes Requested
[nf-next,1/8] netfilter: nf_tables: elements with timeout less than HZ/10 never expire nf_tables: support for updating set element timeout - 1 - - --- 2024-08-07 Pablo Neira Ayuso Changes Requested
netfilter: nf_tables: Add __percpu annotation to *stats pointer in nf_tables_updchain() netfilter: nf_tables: Add __percpu annotation to *stats pointer in nf_tables_updchain() - - 1 - --- 2024-08-06 Uros Bizjak Changes Requested
[iptables,RFC,8/8] nft: Support compat extensions in rule userdata nft: Implement forward compat for future binaries - - - - --- 2024-07-31 Phil Sutter New
[iptables,7/8] nft: Introduce UDATA_TYPE_COMPAT_EXT nft: Implement forward compat for future binaries - - - - --- 2024-07-31 Phil Sutter New
[iptables,6/8] nft: __add_{match,target}() can't fail nft: Implement forward compat for future binaries - - - - --- 2024-07-31 Phil Sutter New
« 1 2 3 4291 292 »