Changes in Makefile

b2441318 - License cleanup: add SPDX GPL-2.0 license identifier to files with no license

Wed, 01 Nov 2017 14:07:57 +0000

License cleanup: add SPDX GPL-2.0 license identifier to files with no licenseMany source files in the tree are missing licensing information, whichmakes it harder for compliance tools to determine the correct license.By default all files without license information are under the defaultlicense of the kernel, which is GPL version 2.Update the files which contain no license information with the 'GPL-2.0'SPDX license identifier. The SPDX identifier is a legally bindingshorthand, which can be used instead of the full boiler plate text.This patch is based on work done by Thomas Gleixner and Kate Stewart andPhilippe Ombredanne.How this work was done:Patches were generated and checked against linux-4.14-rc6 for a subset ofthe use cases: - file had no licensing information it it. - file was a */uapi/* one with no licensing information in it, - file was a */uapi/* one with existing licensing information,Further patches will be generated in subsequent months to fix up caseswhere non-standard license headers were used, and references to licensehad to be inferred by heuristics based on keywords.The analysis to determine which SPDX License Identifier to be applied toa file was done in a spreadsheet of side by side results from of theoutput of two independent scanners (ScanCode & Windriver) producing SPDXtag:value files created by Philippe Ombredanne. Philippe prepared thebase worksheet, and did an initial spot review of a few 1000 files.The 4.13 kernel was the starting point of the analysis with 60,537 filesassessed. Kate Stewart did a file by file comparison of the scannerresults in the spreadsheet to determine which SPDX license identifier(s)to be applied to the file. She confirmed any determination that was notimmediately clear with lawyers working with the Linux Foundation.Criteria used to select files for SPDX license identifier tagging was: - Files considered eligible had to be source code files. - Make and config files were included as candidates if they contained >5 lines of source - File already had some variant of a license header in it (even if <5 lines).All documentation files were explicitly excluded.The following heuristics were used to determine which SPDX licenseidentifiers to apply. - when both scanners couldn't find any license traces, file was considered to have no license information in it, and the top level COPYING file license applied. For non */uapi/* files that summary was: SPDX license identifier # files ---------------------------------------------------|------- GPL-2.0 11139 and resulted in the first patch in this series. If that file was a */uapi/* path one, it was "GPL-2.0 WITH Linux-syscall-note" otherwise it was "GPL-2.0". Results of that was: SPDX license identifier # files ---------------------------------------------------|------- GPL-2.0 WITH Linux-syscall-note 930 and resulted in the second patch in this series. - if a file had some form of licensing information in it, and was one of the */uapi/* ones, it was denoted with the Linux-syscall-note if any GPL family license was found in the file or had no licensing in it (per prior point). Results summary: SPDX license identifier # files ---------------------------------------------------|------ GPL-2.0 WITH Linux-syscall-note 270 GPL-2.0+ WITH Linux-syscall-note 169 ((GPL-2.0 WITH Linux-syscall-note) OR BSD-2-Clause) 21 ((GPL-2.0 WITH Linux-syscall-note) OR BSD-3-Clause) 17 LGPL-2.1+ WITH Linux-syscall-note 15 GPL-1.0+ WITH Linux-syscall-note 14 ((GPL-2.0+ WITH Linux-syscall-note) OR BSD-3-Clause) 5 LGPL-2.0+ WITH Linux-syscall-note 4 LGPL-2.1 WITH Linux-syscall-note 3 ((GPL-2.0 WITH Linux-syscall-note) OR MIT) 3 ((GPL-2.0 WITH Linux-syscall-note) AND MIT) 1 and that resulted in the third patch in this series. - when the two scanners agreed on the detected license(s), that became the concluded license(s). - when there was disagreement between the two scanners (one detected a license but the other didn't, or they both detected different licenses) a manual inspection of the file occurred. - In most cases a manual inspection of the information in the file resulted in a clear resolution of the license that should apply (and which scanner probably needed to revisit its heuristics). - When it was not immediately clear, the license identifier was confirmed with lawyers working with the Linux Foundation. - If there was any question as to the appropriate license identifier, the file was flagged for further research and to be revisited later in time.In total, over 70 hours of logged manual review was done on thespreadsheet to determine the SPDX license identifiers to apply to thesource files by Kate, Philippe, Thomas and, in some cases, confirmationby lawyers working with the Linux Foundation.Kate also obtained a third independent scan of the 4.13 code base fromFOSSology, and compared selected files where the other two scannersdisagreed against that SPDX file, to see if there was new insights. TheWindriver scanner is based on an older version of FOSSology in part, sothey are related.Thomas did random spot checks in about 500 files from the spreadsheetsfor the uapi headers and agreed with SPDX license identifier in thefiles he inspected. For the non-uapi files Thomas did random spot checksin about 15000 files.In initial set of patches against 4.14-rc6, 3 files were found to havecopy/paste license identifier errors, and have been fixed to reflect thecorrect identifier.Additionally Philippe spent 10 hours this week doing a detailed manualinspection and review of the 12,461 patched files from the initial patchversion early this week with: - a full scancode scan run, collecting the matched texts, detected license ids and scores - reviewing anything where there was a license detected (about 500+ files) to ensure that the applied SPDX license was correct - reviewing anything where there was no detection but the patch license was not GPL-2.0 WITH Linux-syscall-note to ensure that the applied SPDX license was correctThis produced a worksheet with 20 files needing minor correction. Thisworksheet was then exported into 3 different .csv files for thedifferent types of files to be modified.These .csv files were then reviewed by Greg. Thomas wrote a script toparse the csv files and add the proper SPDX tag to the file, in theformat that the file expected. This script was further refined by Gregbased on the output to detect more types of files automatically and todistinguish between header and source .c files (which need differentcomment types.) Finally Greg ran the script using the .csv files togenerate the patches.Reviewed-by: Kate Stewart Reviewed-by: Philippe Ombredanne Reviewed-by: Thomas Gleixner Signed-off-by: Greg Kroah-Hartman List of files: /linux-6.15/net/netfilter/ipset/Makefile

c0db95c7 - netfilter: ipset: hash:ipmac type support added to ipset

Thu, 05 May 2016 05:21:26 +0000

netfilter: ipset: hash:ipmac type support added to ipsetIntroduce the hash:ipmac type.Signed-off-by: Tomasz Chili??ski Signed-off-by: Jozsef Kadlecsik List of files: /linux-6.15/net/netfilter/ipset/Makefile

07034aea - netfilter: ipset: hash:mac type added to ipset

Mon, 15 Sep 2014 15:36:06 +0000

netfilter: ipset: hash:mac type added to ipsetSigned-off-by: Jozsef Kadlecsik List of files: /linux-6.15/net/netfilter/ipset/Makefile

3b02b56c - netfilter: ipset: add hash:ip,mark data type to ipset

Tue, 17 Dec 2013 14:01:43 +0000

netfilter: ipset: add hash:ip,mark data type to ipsetIntroduce packet mark support with new ip,mark hash set. This includesuserspace and kernelspace code, hash:ip,mark set tests and man pageupdates.The intended use of ip,mark set is similar to the ip:port type, but forprotocols which don't use a predictable port number. Instead of portnumber it matches a firewall mark determined by a layer 7 filteringprogram like opendpi.As well as allowing or blocking traffic it will also be used foraccounting packets and bytes sent for each protocol.Signed-off-by: Jozsef Kadlecsik List of files: /linux-6.15/net/netfilter/ipset/Makefile

7c3ad056 - netfilter: ipset: Add hash:net,port,net module to kernel.

Sat, 28 Sep 2013 18:33:23 +0000

netfilter: ipset: Add hash:net,port,net module to kernel.This adds a new set that provides similar functionality to ip,port,netbut permits arbitrary size subnets for both the first and lastparameter.Signed-off-by: Oliver Smith Signed-off-by: Jozsef Kadlecsik List of files: /linux-6.15/net/netfilter/ipset/Makefile

ea53ac5b - netfilter: ipset: Add hash:net,net module to kernel.

Fri, 20 Sep 2013 08:13:53 +0000

netfilter: ipset: Add hash:net,net module to kernel.This adds a new set that provides the ability to configure pairs ofsubnets. A small amount of additional handling code has been added tothe generic hash header file - this code is conditionally activated by apreprocessor definition.Signed-off-by: Oliver Smith Signed-off-by: Jozsef Kadlecsik List of files: /linux-6.15/net/netfilter/ipset/Makefile

e385357a - netfilter: ipset: hash:net,iface type introduced

Thu, 16 Jun 2011 17:00:48 +0000

netfilter: ipset: hash:net,iface type introducedThe hash:net,iface type makes possible to store network address andinterface name pairs in a set. It's mostly suitable for egressand ingress filtering. Examples: # ipset create test hash:net,iface # ipset add test 192.168.0.0/16,eth0 # ipset add test 192.168.0.0/24,eth1Signed-off-by: Jozsef Kadlecsik Signed-off-by: Patrick McHardy List of files: /linux-6.15/net/netfilter/ipset/Makefile

f830837f - netfilter: ipset: list:set set type support

Tue, 01 Feb 2011 14:54:59 +0000

netfilter: ipset: list:set set type supportThe module implements the list:set type support in two flavours:without and with timeout. The sets has two sides: for the userspace,they store the names of other (non list:set type of) sets: one can add,delete and test set names. For the kernel, it forms an ordered union ofthe member sets: the members sets are tried in order when elements areadded, deleted and tested and the process stops at the first success.Signed-off-by: Jozsef Kadlecsik Signed-off-by: Patrick McHardy List of files: /linux-6.15/net/netfilter/ipset/Makefile

21f45020 - netfilter: ipset: hash:net,port set type support

Tue, 01 Feb 2011 14:53:55 +0000

netfilter: ipset: hash:net,port set type supportThe module implements the hash:net,port type support in four flavours:for IPv4 and IPv6, both without and with timeout support. The elementsare two dimensional: IPv4/IPv6 network address/prefix and protocol/portpairs.Signed-off-by: Jozsef Kadlecsik Signed-off-by: Patrick McHardy List of files: /linux-6.15/net/netfilter/ipset/Makefile

b3837029 - netfilter: ipset: hash:net set type support

Tue, 01 Feb 2011 14:52:54 +0000

netfilter: ipset: hash:net set type supportThe module implements the hash:net type support in four flavours:for IPv4 and IPv6, both without and with timeout support. The elementsare one dimensional: IPv4/IPv6 network address/prefixes.Signed-off-by: Jozsef Kadlecsik Signed-off-by: Patrick McHardy List of files: /linux-6.15/net/netfilter/ipset/Makefile

41d22f7b - netfilter: ipset: hash:ip,port,net set type support

Tue, 01 Feb 2011 14:51:00 +0000

netfilter: ipset: hash:ip,port,net set type supportThe module implements the hash:ip,port,net type support in four flavours:for IPv4 and IPv6, both without and with timeout support. The elementsare three dimensional: IPv4/IPv6 address, protocol/port and IPv4/IPv6network address/prefix triples. The different prefixes are searched/matchedfrom the longest prefix to the shortes one (most specific to least).In other words the processing time linearly grows with the number ofdifferent prefixes in the set.Signed-off-by: Jozsef Kadlecsik Signed-off-by: Patrick McHardy List of files: /linux-6.15/net/netfilter/ipset/Makefile

5663bc30 - netfilter: ipset: hash:ip,port,ip set type support

Tue, 01 Feb 2011 14:41:26 +0000

netfilter: ipset: hash:ip,port,ip set type supportThe module implements the hash:ip,port,ip type support in four flavours:for IPv4 and IPv6, both without and with timeout support. The elementsare three dimensional: IPv4/IPv6 address, protocol/port and IPv4/IPv6address triples.Signed-off-by: Jozsef Kadlecsik Signed-off-by: Patrick McHardy List of files: /linux-6.15/net/netfilter/ipset/Makefile

07896ed3 - netfilter: ipset: hash:ip,port set type support

Tue, 01 Feb 2011 14:39:52 +0000

netfilter: ipset: hash:ip,port set type supportThe module implements the hash:ip,port type support in four flavours:for IPv4 and IPv6, both without and with timeout support. The elementsare two dimensional: IPv4/IPv6 address and protocol/port pairs. The portis interpeted for TCP, UPD, ICMP and ICMPv6 (at the latters as type/codeof course).Signed-off-by: Jozsef Kadlecsik Signed-off-by: Patrick McHardy List of files: /linux-6.15/net/netfilter/ipset/Makefile

6c027889 - netfilter: ipset: hash:ip set type support

Tue, 01 Feb 2011 14:38:36 +0000

netfilter: ipset: hash:ip set type supportThe module implements the hash:ip type support in four flavours:for IPv4 or IPv6, both without and with timeout support.All the hash types are based on the "array hash" or ahash structureand functions as a good compromise between minimal memory footprintand speed. The hashing uses arrays to resolve clashes. The hash tableis resized (doubled) when searching becomes too long. Resizing can betriggered by userspace add commands only and those are serialized bythe nfnl mutex. During resizing the set is read-locked, so the onlypossible concurrent operations are the kernel side readers. Those areprotected by RCU locking.Because of the four flavours and the other hash types, the functionsare implemented in general forms in the ip_set_ahash.h header fileand the real functions are generated before compiling by macro expansion.Thus the dereferencing of low-level functions and void pointer argumentscould be avoided: the low-level functions are inlined, the functionarguments are pointers of type-specific structures.Signed-off-by: Jozsef Kadlecsik Signed-off-by: Patrick McHardy List of files: /linux-6.15/net/netfilter/ipset/Makefile

54326190 - netfilter: ipset; bitmap:port set type support

Tue, 01 Feb 2011 14:37:04 +0000

netfilter: ipset; bitmap:port set type supportThe module implements the bitmap:port type in two flavours, withoutand with timeout support to store TCP/UDP ports from a range.Signed-off-by: Jozsef Kadlecsik Signed-off-by: Patrick McHardy List of files: /linux-6.15/net/netfilter/ipset/Makefile

de76021a - netfilter: ipset: bitmap:ip,mac type support

Tue, 01 Feb 2011 14:35:12 +0000

netfilter: ipset: bitmap:ip,mac type supportThe module implements the bitmap:ip,mac set type in two flavours,without and with timeout support. In this kind of set one can storeIPv4 address and (source) MAC address pairs. The type supports elementsadded without the MAC part filled out: when the first matching from kernelhappens, the MAC part is automatically filled out. The timing out of theelements stars when an element is complete in the IP,MAC pair.Signed-off-by: Jozsef Kadlecsik Signed-off-by: Patrick McHardy List of files: /linux-6.15/net/netfilter/ipset/Makefile

72205fc6 - netfilter: ipset: bitmap:ip set type support

Tue, 01 Feb 2011 14:33:17 +0000

netfilter: ipset: bitmap:ip set type supportThe module implements the bitmap:ip set type in two flavours, withoutand with timeout support. In this kind of set one can store IPv4addresses (or network addresses) from a given range.In order not to waste memory, the timeout version does not rely onthe kernel timer for every element to be timed out but on garbagecollection. All set types use this mechanism.Signed-off-by: Jozsef Kadlecsik Signed-off-by: Patrick McHardy List of files: /linux-6.15/net/netfilter/ipset/Makefile

a7b4f989 - netfilter: ipset: IP set core support

Tue, 01 Feb 2011 14:28:35 +0000

netfilter: ipset: IP set core supportThe patch adds the IP set core support to the kernel.The IP set core implements a netlink (nfnetlink) based protocol by whichone can create, destroy, flush, rename, swap, list, save, restore sets,and add, delete, test elements from userspace. For simplicity (and backwardcompatibilty and for not to force ip(6)tables to be linked with a netlinklibrary) reasons a small getsockopt-based protocol is also kept in orderto communicate with the ip(6)tables match and target.The netlink protocol passes all u16, etc values in network order withNLA_F_NET_BYTEORDER flag. The protocol enforces the proper use of theNLA_F_NESTED and NLA_F_NET_BYTEORDER flags.For other kernel subsystems (netfilter match and target) the API containsthe functions to add, delete and test elements in sets and the required callsto get/put refereces to the sets before those operations can be performed.The set types (which are implemented in independent modules) are storedin a simple RCU protected list. A set type may have variants: for examplewithout timeout or with timeout support, for IPv4 or for IPv6. The sets(i.e. the pointers to the sets) are stored in an array. The sets areidentified by their index in the array, which makes possible easy andfast swapping of sets. The array is protected indirectly by the nfnlmutex from nfnetlink. The content of the sets are protected by the rwlockof the set.There are functional differences between the add/del/test functionsfor the kernel and userspace:- kernel add/del/test: works on the current packet (i.e. one element)- kernel test: may trigger an "add" operation in order to fill out unspecified parts of the element from the packet (like MAC address)- userspace add/del: works on the netlink message and thus possibly on multiple elements from the IPSET_ATTR_ADT container attribute.- userspace add: may trigger resizing of a setSigned-off-by: Jozsef Kadlecsik Signed-off-by: Patrick McHardy List of files: /linux-6.15/net/netfilter/ipset/Makefile