netfilter: deprecate NF_STOP
authorPablo Neira Ayuso <pablo@netfilter.org>
Thu, 3 Nov 2016 09:56:17 +0000 (10:56 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Thu, 3 Nov 2016 09:56:17 +0000 (10:56 +0100)
commit06fd3a392bb36ff162d10cb7d5794185b94edb2f
tree9b7b5a5b3f82e2b11f6cd903a724eb4829e0ce95
parent1610a73c4175e7d63985316b52ac932b65a4dc90
netfilter: deprecate NF_STOP

NF_STOP is only used by br_netfilter these days, and it can be emulated
with a combination of NF_STOLEN plus explicit call to the ->okfn()
function as Florian suggests.

To retain binary compatibility with userspace nf_queue application, we
have to keep NF_STOP around, so libnetfilter_queue userspace userspace
applications still work if they use NF_STOP for some exotic reason.

Out of tree modules using NF_STOP would break, but we don't care about
those.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/uapi/linux/netfilter.h
net/bridge/br_netfilter_hooks.c
net/netfilter/core.c