Need to add NFPROTO_BRIDGE to nft_flow_offload_validate() to support
the bridge-fastpath.

Reviewed-by: Nikolay Aleksandrov <ra...@blackwall.org>
Signed-off-by: Eric Woudstra <ericwo...@gmail.com>
---
 net/netfilter/nft_flow_offload.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/net/netfilter/nft_flow_offload.c b/net/netfilter/nft_flow_offload.c
index e77164424891..889393edc629 100644
--- a/net/netfilter/nft_flow_offload.c
+++ b/net/netfilter/nft_flow_offload.c
@@ -438,7 +438,8 @@ static int nft_flow_offload_validate(const struct nft_ctx 
*ctx,
 
        if (ctx->family != NFPROTO_IPV4 &&
            ctx->family != NFPROTO_IPV6 &&
-           ctx->family != NFPROTO_INET)
+           ctx->family != NFPROTO_INET &&
+           ctx->family != NFPROTO_BRIDGE)
                return -EOPNOTSUPP;
 
        return nft_chain_validate_hooks(ctx->chain, hook_mask);
-- 
2.47.1


Reply via email to