netfilter: nf_tables: restrict tunnel object to NFPROTO_NETDEV
authorPablo Neira Ayuso <pablo@netfilter.org>
Tue, 23 Jan 2024 22:45:32 +0000 (23:45 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 31 Jan 2024 22:07:04 +0000 (23:07 +0100)
commit776d451648443f9884be4a1b4e38e8faf1c621f9
tree89653106ce22d62733c460d45e19cd672c8a8510
parentfb366fc7541a1de521ab3df58471746aa793b833
netfilter: nf_tables: restrict tunnel object to NFPROTO_NETDEV

Bail out on using the tunnel dst template from other than netdev family.
Add the infrastructure to check for the family in objects.

Fixes: af308b94a2a4 ("netfilter: nf_tables: add tunnel support")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/net/netfilter/nf_tables.h
net/netfilter/nf_tables_api.c
net/netfilter/nft_tunnel.c