| Message ID | 20220824220330.64283-11-pablo@netfilter.org (mailing list archive) |
|---|---|
| State | Accepted |
| Commit | 01e4092d53bc4fe122a6e4b6d664adbd57528ca3 |
| Delegated to: | Netdev Maintainers |
| Headers | show |
| Series | [net,01/14] netfilter: ebtables: reject blobs that don't provide all entry points | expand |
diff --git a/net/netfilter/nft_tunnel.c b/net/netfilter/nft_tunnel.c index 5edaaded706d..983ade4be3b3 100644 --- a/net/netfilter/nft_tunnel.c +++ b/net/netfilter/nft_tunnel.c @@ -161,6 +161,7 @@ static const struct nft_expr_ops nft_tunnel_get_ops = { static struct nft_expr_type nft_tunnel_type __read_mostly = { .name = "tunnel", + .family = NFPROTO_NETDEV, .ops = &nft_tunnel_get_ops, .policy = nft_tunnel_policy, .maxattr = NFTA_TUNNEL_MAX,
Only allow to use this expression from NFPROTO_NETDEV family. Fixes: af308b94a2a4 ("netfilter: nf_tables: add tunnel support") Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> --- net/netfilter/nft_tunnel.c | 1 + 1 file changed, 1 insertion(+)