!2383 nf_table LTS

Merge Pull Request from: @ci-robot 
 
PR sync from: Lu Wei <luwei32@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/L2G45QT5V2CQGLPTC37WVTGCXUM6X2GS/ 
Florian Westphal (1):
  netfilter: nf_tables: use net_generic infra for transaction data

Lu Wei (7):
  Revert "netfilter: nf_tables: unbind non-anonymous set if rule
    construction fails"
  Revert "netfilter: nf_tables: skip immediate deactivate in
    _PREPARE_ERROR"
  Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with
    bound set/chain"
  Revert "netfilter: nf_tables: fix chain binding transaction logic"
  Revert "netfilter: nf_tables: incorrect error path handling with
    NFT_MSG_NEWRULE"
  Revert "netfilter: nf_tables: skip bound chain on rule flush"
  Revert "netfilter: nf_tables: disallow rule addition to bound chain
    via NFTA_RULE_CHAIN_ID"

Pablo Neira Ayuso (11):
  netfilter: nf_tables: incorrect error path handling with
    NFT_MSG_NEWRULE
  netfilter: nf_tables: fix chain binding transaction logic
  netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound
    set/chain
  netfilter: nf_tables: reject unbound anonymous set before commit phase
  netfilter: nf_tables: reject unbound chain set before commit phase
  netfilter: nftables: rename set element data activation/deactivation
    functions
  netfilter: nf_tables: drop map element references from preparation
    phase
  netfilter: nf_tables: unbind non-anonymous set if rule construction
    fails
  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
  netfilter: nf_tables: skip bound chain on rule flush
  netfilter: nf_tables: disallow rule addition to bound chain via
    NFTA_RULE_CHAIN_ID


-- 
2.34.1
 
https://gitee.com/openeuler/kernel/issues/I86JB6 
 
Link:https://gitee.com/openeuler/kernel/pulls/2383

 

Reviewed-by: Yue Haibing <yuehaibing@huawei.com>
Signed-off-by: Jialin Zhang <zhangjialin11@huawei.com>