From dba4a9b4b5fe2c4b6929be799fdb9332fc653e1b Mon Sep 17 00:00:00 2001 From: Fernando Fernandez Mancera Date: Fri, 2 Aug 2019 12:12:10 +0200 Subject: src: allow variable in chain policy This patch allows you to use variables in chain policy definition, e.g. define default_policy = "accept" add table ip foo add chain ip foo bar {type filter hook input priority filter; policy $default_policy} Signed-off-by: Fernando Fernandez Mancera Signed-off-by: Pablo Neira Ayuso --- include/datatype.h | 1 + include/rule.h | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) (limited to 'include') diff --git a/include/datatype.h b/include/datatype.h index ddcb7db8..c1d08cc2 100644 --- a/include/datatype.h +++ b/include/datatype.h @@ -263,6 +263,7 @@ extern const struct datatype igmp_type_type; extern const struct datatype time_type; extern const struct datatype boolean_type; extern const struct datatype priority_type; +extern const struct datatype policy_type; void inet_service_type_print(const struct expr *expr, struct output_ctx *octx); diff --git a/include/rule.h b/include/rule.h index 4c8cab13..0ef6aacd 100644 --- a/include/rule.h +++ b/include/rule.h @@ -206,7 +206,7 @@ struct chain { const char *hookstr; unsigned int hooknum; struct prio_spec priority; - int policy; + struct expr *policy; const char *type; const char *dev; struct scope scope; -- cgit v1.2.3