netfilter: netns: remove nf_*_net() wrappers
Now that dev_net() exists, the usefullness of them is even less. Also they're a big problem in resolving circular header dependencies necessary for NOTRACK-in-netns patch. See below. Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com> Signed-off-by: Patrick McHardy <kaber@trash.net>
This commit is contained in:
committed by
Patrick McHardy
parent
55b69e9104
commit
48dc7865aa
@@ -68,7 +68,7 @@ ip6t_local_in_hook(unsigned int hook,
|
||||
int (*okfn)(struct sk_buff *))
|
||||
{
|
||||
return ip6t_do_table(skb, hook, in, out,
|
||||
nf_local_in_net(in, out)->ipv6.ip6table_filter);
|
||||
dev_net(in)->ipv6.ip6table_filter);
|
||||
}
|
||||
|
||||
static unsigned int
|
||||
@@ -79,7 +79,7 @@ ip6t_forward_hook(unsigned int hook,
|
||||
int (*okfn)(struct sk_buff *))
|
||||
{
|
||||
return ip6t_do_table(skb, hook, in, out,
|
||||
nf_forward_net(in, out)->ipv6.ip6table_filter);
|
||||
dev_net(in)->ipv6.ip6table_filter);
|
||||
}
|
||||
|
||||
static unsigned int
|
||||
@@ -100,7 +100,7 @@ ip6t_local_out_hook(unsigned int hook,
|
||||
#endif
|
||||
|
||||
return ip6t_do_table(skb, hook, in, out,
|
||||
nf_local_out_net(in, out)->ipv6.ip6table_filter);
|
||||
dev_net(out)->ipv6.ip6table_filter);
|
||||
}
|
||||
|
||||
static struct nf_hook_ops ip6t_ops[] __read_mostly = {
|
||||
|
@@ -72,7 +72,7 @@ ip6t_local_in_hook(unsigned int hook,
|
||||
int (*okfn)(struct sk_buff *))
|
||||
{
|
||||
return ip6t_do_table(skb, hook, in, out,
|
||||
nf_local_in_net(in, out)->ipv6.ip6table_security);
|
||||
dev_net(in)->ipv6.ip6table_security);
|
||||
}
|
||||
|
||||
static unsigned int
|
||||
@@ -83,7 +83,7 @@ ip6t_forward_hook(unsigned int hook,
|
||||
int (*okfn)(struct sk_buff *))
|
||||
{
|
||||
return ip6t_do_table(skb, hook, in, out,
|
||||
nf_forward_net(in, out)->ipv6.ip6table_security);
|
||||
dev_net(in)->ipv6.ip6table_security);
|
||||
}
|
||||
|
||||
static unsigned int
|
||||
@@ -95,7 +95,7 @@ ip6t_local_out_hook(unsigned int hook,
|
||||
{
|
||||
/* TBD: handle short packets via raw socket */
|
||||
return ip6t_do_table(skb, hook, in, out,
|
||||
nf_local_out_net(in, out)->ipv6.ip6table_security);
|
||||
dev_net(out)->ipv6.ip6table_security);
|
||||
}
|
||||
|
||||
static struct nf_hook_ops ip6t_ops[] __read_mostly = {
|
||||
|
Reference in New Issue
Block a user