tests: shell: Check overhead in iptables-save and -restore

new version

Use proto_to_name() from xshared in more places

libxtables: Boost rule target checks by announcing chain names
libxtables: Implement notargets hash table
nft: Reject standard targets as chain names when restoring
xshared: Merge and share parse_chain()
xshared: Prefer xtables_chain_protos lookup over getprotoent
nft: Speed up immediate parsing
nft: Simplify immediate parsing

extensions: SECMARK: Use a better context in test case

extensions: SECMARK: Implement revision 1

tests/shell: Assert non-verbose mode is silent
nft: Fix for non-verbose check command

ebtables: Dump atomic waste
doc: ebtables-nft.8: Adjust for missing atomic-options
nft: Use xtables_malloc() in mnl_err_list_node_add()

Add missing readlink required for iptables-nft(post)

Rebuilt for IMA sigs, glibc 2.34, aarch64 flags

nft-services must not depend on specific arch's build

Build services sub-packages as noarch

Make nft-services obsolete nft-compat to fix upgrade path

Build iptables-services on C9S only
Use systemd_ordering in nft-services, too
Drop compat package, nft-services serves well for that purpose
Make legacy unconditionally provide iptables, it's not built on RHEL

Make iptables-nft-services require iptables-services to avoid confusion
Add deprecation notice to iptables-extensions man page as well

Provide a compat package to fix upgrade path from RHEL8