netfilter: nft_tunnel: restrict it to netdev family
[ Upstream commit01e4092d53
] Only allow to use this expression from NFPROTO_NETDEV family. Fixes:af308b94a2
("netfilter: nf_tables: add tunnel support") Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> Signed-off-by: Sasha Levin <sashal@kernel.org>
This commit is contained in:
parent
fba05d2502
commit
dbd0f1991a
|
@ -134,6 +134,7 @@ static const struct nft_expr_ops nft_tunnel_get_ops = {
|
|||
|
||||
static struct nft_expr_type nft_tunnel_type __read_mostly = {
|
||||
.name = "tunnel",
|
||||
.family = NFPROTO_NETDEV,
|
||||
.ops = &nft_tunnel_get_ops,
|
||||
.policy = nft_tunnel_policy,
|
||||
.maxattr = NFTA_TUNNEL_MAX,
|
||||
|
|
Loading…
Reference in New Issue