Florian Westphal 47a6959fa3 netfilter: allow to turn off xtables compat layer ...

The compat layer needs to parse untrusted input (the ruleset)
to translate it to a 64bit compatible format.

We had a number of bugs in this department in the past, so allow users
to turn this feature off.

Add CONFIG_NETFILTER_XTABLES_COMPAT kconfig knob and make it default to y
to keep existing behaviour.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

2021-04-26 18:16:56 +02:00

..

acpi

ACPI: scan: Use unique number for instance_no

2021-03-22 17:45:53 +01:00

asm-generic

Merge tag 'riscv-for-linus-5.12-mw0' of git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux

2021-02-26 10:28:35 -08:00

clocksource

…

crypto

Merge tag 'keys-misc-20210126' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs

2021-02-23 16:09:23 -08:00

drm

drm/ttm: make ttm_bo_unpin more defensive

2021-03-15 16:02:30 +01:00

dt-bindings

treewide: change my e-mail address, fix my name

2021-04-09 14:54:23 -07:00

keys

…

kunit

…

kvm

KVM: arm64: Turn kvm_arm_support_pmu_v3() into a static key

2021-03-06 04:18:40 -05:00

linux

netfilter: allow to turn off xtables compat layer

2021-04-26 18:16:56 +02:00

math-emu

…

media

media: rc: compile rc-cec.c into rc-core

2021-03-11 11:40:28 +01:00

memory

…

misc

…

net

netfilter: nftables: add nft_pernet() helper function

2021-04-26 03:58:17 +02:00

pcmcia

…

ras

…

rdma

RDMA/ipoib: Remove racy Subnet Manager sendonly join checks

2021-02-16 14:42:58 -04:00

scsi

scsi: iscsi: Fix race condition between login and sync thread

2021-03-29 21:17:45 -04:00

soc

time64.h: Consolidated PSEC_PER_SEC definition

2021-04-06 16:32:17 -07:00

sound

Merge tag 'tags/sound-sdw-kconfig-fixes' into for-linus

2021-03-02 18:30:07 +01:00

target

scsi: target: core: Add cmd length set before cmd complete

2021-02-22 22:21:29 -05:00

trace

mptcp: add tracepoint in subflow_check_data_avail

2021-04-16 17:10:40 -07:00

uapi

netfilter: nft_socket: add support for cgroupsv2

2021-04-26 03:20:07 +02:00

vdso

time64.h: Consolidated PSEC_PER_SEC definition

2021-04-06 16:32:17 -07:00

video

…

xen

Xen/gnttab: introduce common INVALID_GRANT_{HANDLE,REF}

2021-03-10 16:39:29 -06:00