diff options
| author | Phil Sutter <phil@nwl.cc> | 2020-07-10 20:08:35 +0200 |
|---|---|---|
| committer | Phil Sutter <phil@nwl.cc> | 2020-07-24 19:15:49 +0200 |
| commit | 0b7c22e00622db468846f11809ca0cecc6c7cd97 (patch) | |
| tree | ed361a57baa34093872d4bf90c588b4187a11fdd /iptables/nft.h | |
| parent | 26ec09bf6b9b674a7e3a65fc9c12599bd81dfe0f (diff) | |
nft: Make table creation purely implicit
While asserting a required builtin chain exists, its table is created
implicitly if missing. Exploit this from xtables-restore, too: The only
actions which need adjustment are chain_new and chain_restore, i.e. when
restoring (either builtin or custom) chains.
Note: The call to nft_table_builtin_add() wasn't sufficient as it
doesn't set the table as initialized and therefore a following call to
nft_xt_builtin_init() would override non-default base chain policies.
Note2: The 'table_new' callback in 'nft_xt_restore_cb' is left in place
as xtables-translate uses it to print an explicit 'add table' command.
Note3: nft_table_new() function was already unused since a7f1e208cdf9c
("nft: split parsing from netlink commands").
Signed-off-by: Phil Sutter <phil@nwl.cc>
Diffstat (limited to 'iptables/nft.h')
| -rw-r--r-- | iptables/nft.h | 2 |
1 files changed, 0 insertions, 2 deletions
diff --git a/iptables/nft.h b/iptables/nft.h index bd783231..bd944f44 100644 --- a/iptables/nft.h +++ b/iptables/nft.h @@ -68,7 +68,6 @@ enum obj_update_type { NFT_COMPAT_RULE_SAVE, NFT_COMPAT_RULE_ZERO, NFT_COMPAT_BRIDGE_USER_CHAIN_UPDATE, - NFT_COMPAT_TABLE_NEW, }; struct cache_chain { @@ -135,7 +134,6 @@ int nft_for_each_table(struct nft_handle *h, int (*func)(struct nft_handle *h, c bool nft_table_find(struct nft_handle *h, const char *tablename); int nft_table_purge_chains(struct nft_handle *h, const char *table, struct nftnl_chain_list *list); int nft_table_flush(struct nft_handle *h, const char *table); -void nft_table_new(struct nft_handle *h, const char *table); const struct builtin_table *nft_table_builtin_find(struct nft_handle *h, const char *table); /* |