netfilter: ipset: add markmask for hash:ip,mark data type

Introduce packet mark mask for hash:ip,mark data type. This allows to
set mark bit filter for the ip set.

Change-Id: Id8dd9ca7e64477c4f7b022a1d9c1a5b187f1c96e

Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>

1 files changed, 2 insertions, 0 deletions

diff --git a/include/uapi/linux/netfilter/ipset/ip_set.h b/include/uapi/linux/netfilter/ipset/ip_set.h
index 5368f8275774..f636f282b142 100644
--- a/include/uapi/linux/netfilter/ipset/ip_set.h
+++ b/include/uapi/linux/netfilter/ipset/ip_set.h
@@ -89,6 +89,7 @@ enum {
         IPSET_ATTR_GC,
         IPSET_ATTR_HASHSIZE,
         IPSET_ATTR_MAXELEM,
+        IPSET_ATTR_MARKMASK,
         IPSET_ATTR_NETMASK,
         IPSET_ATTR_PROBES,
         IPSET_ATTR_RESIZE,
@@ -138,6 +139,7 @@ enum ipset_errno {
         IPSET_ERR_EXIST,
         IPSET_ERR_INVALID_CIDR,
         IPSET_ERR_INVALID_NETMASK,
+        IPSET_ERR_INVALID_MARKMASK,
         IPSET_ERR_INVALID_FAMILY,
         IPSET_ERR_TIMEOUT,
         IPSET_ERR_REFERENCED,