netfilter: flowtable: restrict flow dissector match on meta ingress device
authorPablo Neira Ayuso <pablo@netfilter.org>
Mon, 6 Jan 2020 11:42:55 +0000 (12:42 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Thu, 16 Jan 2020 14:51:48 +0000 (15:51 +0100)
commita7521a60a5f3e1f58a015fedb6e69aed40455feb
tree5c202abf14d2a1dba8e3e16e86ae32ca691c846b
parent79b9b685dde1d1bf43cf84163c76953dc3781c85
netfilter: flowtable: restrict flow dissector match on meta ingress device

Set on FLOW_DISSECTOR_KEY_META meta key using flow tuple ingress interface.

Fixes: c29f74e0df7a ("netfilter: nf_flow_table: hardware offload support")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_flow_table_offload.c