Re: [PATCH 1/2 iptables] libxt_cgroup: prepare for multi revisions

From: Pablo Neira Ayuso
Date: Sun Nov 22 2015 - 15:31:42 EST


On Sat, Nov 21, 2015 at 11:18:46AM -0500, Tejun Heo wrote:
> libxt_cgroup will grow cgroup2 path based match. Postfix existing
> symbols with _v0 and prepare for multi revision registration. While
> at it, rename O_CGROUP to O_CLASSID and fwid to classid.
>
> Signed-off-by: Tejun Heo <tj@xxxxxxxxxx>
> Cc: Daniel Borkmann <dborkman@xxxxxxxxxx>
> Cc: Jan Engelhardt <jengelh@xxxxxxx>
> Cc: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
> ---
> extensions/libxt_cgroup.c | 51 +++++++++++++++++++-----------------
> include/linux/netfilter/xt_cgroup.h | 2 -
> 2 files changed, 28 insertions(+), 25 deletions(-)
>
> --- a/extensions/libxt_cgroup.c
> +++ b/extensions/libxt_cgroup.c
> @@ -3,30 +3,30 @@
> #include <linux/netfilter/xt_cgroup.h>
>
> enum {
> - O_CGROUP = 0,
> + O_CLASSID = 0,
> };
>
> -static void cgroup_help(void)
> +static void cgroup_help_v0(void)
> {
> printf(
> "cgroup match options:\n"
> -"[!] --cgroup fwid Match cgroup fwid\n");
> +"[!] --cgroup classid Match cgroup classid\n");

We have to keep the old cgroup integer ID around for a while,
otherwise we'll break users with old kernels and new iptables
utilities.
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/