The patch looks good overall, but get_netfilter_capabilities() needs to be updated and a ton of tests. I am working on that now.
The patch looks good overall, but get_netfilter_ capabilities( ) needs to be updated and a ton of tests. I am working on that now.