diff options
Diffstat (limited to 'iptables/nft.c')
| -rw-r--r-- | iptables/nft.c | 12 |
1 files changed, 9 insertions, 3 deletions
diff --git a/iptables/nft.c b/iptables/nft.c index 041e1b8c..d011d7c8 100644 --- a/iptables/nft.c +++ b/iptables/nft.c @@ -3514,10 +3514,16 @@ int nft_compatible_revision(const char *name, uint8_t rev, int opt) err: mnl_socket_close(nl); - /* pretend revision 0 is valid if not permitted to check - - * this is required for printing extension help texts as user */ - if (ret < 0 && errno == EPERM && rev == 0) + /* pretend revision 0 is valid - + * this is required for printing extension help texts as user, also + * helps error messaging on unavailable kernel extension */ + if (ret < 0 && rev == 0) { + if (errno != EPERM) + fprintf(stderr, + "Warning: Extension %s revision 0 not supported, missing kernel module?\n", + name); return 1; + } return ret < 0 ? 0 : 1; } |