path: root/iptables/nft.c
diff options
authorTomasz Bursztyka <>2014-02-11 18:36:43 +0200
committerPablo Neira Ayuso <>2014-02-12 10:10:10 +0100
commit690ea18fdd6f8bc12322a729a2f7c97d8e731c43 (patch)
tree430d646144110a8b97c31c621516c913431f8941 /iptables/nft.c
parent837629fed24af7298fbf4cd28c7a51f24b70ee93 (diff)
nft: A builtin chain might be created when restoring
nft_chain_set() is directly used in xtables-restore.c, however at that point no builtin chains have been created yet thus the need to request to build it relevantly. Signed-off-by: Tomasz Bursztyka <> Signed-off-by: Pablo Neira Ayuso <>
Diffstat (limited to 'iptables/nft.c')
1 files changed, 1 insertions, 0 deletions
diff --git a/iptables/nft.c b/iptables/nft.c
index 36ac69cc..501c6d86 100644
--- a/iptables/nft.c
+++ b/iptables/nft.c
@@ -744,6 +744,7 @@ __nft_chain_set(struct nft_handle *h, const char *table,
nlh = nft_chain_nlmsg_build_hdr(buf, NFT_MSG_NEWCHAIN, h->family,
+ h->restore ? NLM_F_ACK|NLM_F_CREATE :
NLM_F_ACK, h->seq);
nft_chain_nlmsg_build_payload(nlh, c);