diff options
| author | Phil Sutter <phil@nwl.cc> | 2023-06-16 18:56:11 +0300 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2023-06-20 23:43:42 +0300 |
| commit | 42e344f01688490cdac4bed8f5ba21817cad26ee (patch) | |
| tree | 46f18ae549d01e1da76f421367c8376e8f7f96d5 /include/net | |
| parent | 62f9a68a36d4441a6c412b81faed102594bc6670 (diff) | |
| download | linux-42e344f01688490cdac4bed8f5ba21817cad26ee.tar.xz | |
netfilter: nf_tables: Fix for deleting base chains with payload
When deleting a base chain, iptables-nft simply submits the whole chain
to the kernel, including the NFTA_CHAIN_HOOK attribute. The new code
added by fixed commit then turned this into a chain update, destroying
the hook but not the chain itself. Detect the situation by checking if
the chain type is either netdev or inet/ingress.
Fixes: 7d937b107108f ("netfilter: nf_tables: support for deleting devices in an existing netdev chain")
Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'include/net')
0 files changed, 0 insertions, 0 deletions