Bug 2211096
Summary: | Rebase package onto libnftnl-1.2.2-1.el9 | ||
---|---|---|---|
Product: | Red Hat Enterprise Linux 8 | Reporter: | Phil Sutter <psutter> |
Component: | libnftnl | Assignee: | Phil Sutter <psutter> |
Status: | CLOSED ERRATA | QA Contact: | Tomas Dolezal <todoleza> |
Severity: | unspecified | Docs Contact: | Mayur Patil <maypatil> |
Priority: | unspecified | ||
Version: | 8.9 | CC: | maypatil, todoleza |
Target Milestone: | rc | Keywords: | Triaged |
Target Release: | 8.9 | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Whiteboard: | |||
Fixed In Version: | libnftnl-1.2.2-3.el8 | Doc Type: | Enhancement |
Doc Text: |
.The `libnftnl` package rebased to version 1.2.2
The Netlink API to the in-kernel `nf_tables` subsystem (`libnftnl`) package has been rebased. Notable changes and enhancements include:
* Added features:
** Nesting of the `udata` attribute
** Resetting TCP options with the `exthdr` expression
** The `sdif` and `sdifname` meta keywords
** Support for a new attribute `NFTNL_CHAIN_FLAGS` in the `nftnl_chain` struct, to communicate flags between the kernel and user space.
** Support for the `nftnl_set` struct nftables sets backend to add expressions to sets and set elements.
** Comments to sets, tables, objects, and chains
** The `nftnl_table` struct now has an `NFTNL_TABLE_OWNER` attribute. Set this attribute to enable the kernel to communicate the owner to the user space.
** Readiness for incremental updates to flowtable device
** The `typeof` keyword related `nftnl_set udata` definitions
** The `chain` ID attribute
** The function to remove expressions from a rule
** A new `last` expression
* Improved bitwise expressions:
** Newly added `op` and `data` attributes
** Left and right shifts
** Aligned with debug output of other expressions
* Improved socket expressions:
** Added the `wildcard` attribute
** Support for cgroups v2
* Improved debug output:
** Included the `key_end` data register in set elements
** Dropped unused registers from `masq` and nat expressions
** Applied fix for verdict map elements
** Removed leftovers from dropped XML formatting
** Support for payload offset of inner header
|
Story Points: | --- |
Clone Of: | Environment: | ||
Last Closed: | 2023-11-14 15:51:01 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | |||
Bug Blocks: | 2211076 |
Description
Phil Sutter
2023-05-30 13:35:44 UTC
Proposed changes here: https://gitlab.com/redhat/centos-stream/rpms/libnftnl/-/merge_requests/4 Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (libnftnl bug fix and enhancement update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2023:7154 |