[NETFILTER]: Add SELINUX priority values for ipv4/ipv6, approved by Harald Welte.

diff --git a/include/linux/netfilter_ipv4.h b/include/linux/netfilter_ipv4.h
index 336c47be6837bb27f34d7bfa9bdde9f3f4e62d18..8744f0c57fb61d3fd4f6a9abf1a271c4dcc5cb71 100644 (file)
--- a/include/linux/netfilter_ipv4.h
+++ b/include/linux/netfilter_ipv4.h
@@ -51,6 +51,7 @@
 
 enum nf_ip_hook_priorities {
        NF_IP_PRI_FIRST = INT_MIN,
+       NF_IP_PRI_SELINUX_FIRST = -225,
        NF_IP_PRI_CONNTRACK = -200,
        NF_IP_PRI_BRIDGE_SABOTAGE_FORWARD = -175,
        NF_IP_PRI_MANGLE = -150,
@@ -58,6 +59,7 @@ enum nf_ip_hook_priorities {
        NF_IP_PRI_BRIDGE_SABOTAGE_LOCAL_OUT = -50,
        NF_IP_PRI_FILTER = 0,
        NF_IP_PRI_NAT_SRC = 100,
+       NF_IP_PRI_SELINUX_LAST = 225,
        NF_IP_PRI_LAST = INT_MAX,
 };
 

diff --git a/include/linux/netfilter_ipv6.h b/include/linux/netfilter_ipv6.h
index f6da04e492071a77b891fa7b75bff5156b065944..ad7d8a4e0d5572533b5d1901c4ac72be5870ffd4 100644 (file)
--- a/include/linux/netfilter_ipv6.h
+++ b/include/linux/netfilter_ipv6.h
@@ -56,11 +56,13 @@
 
 enum nf_ip6_hook_priorities {
        NF_IP6_PRI_FIRST = INT_MIN,
+       NF_IP6_PRI_SELINUX_FIRST = -225,
        NF_IP6_PRI_CONNTRACK = -200,
        NF_IP6_PRI_MANGLE = -150,
        NF_IP6_PRI_NAT_DST = -100,
        NF_IP6_PRI_FILTER = 0,
        NF_IP6_PRI_NAT_SRC = 100,
+       NF_IP6_PRI_SELINUX_LAST = 225,
        NF_IP6_PRI_LAST = INT_MAX,
 };