From 3a7bdd02207f7ae6cd74af8c313d6d0f8f66f4be Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Christian=20G=C3=B6ttsche?= Date: Wed, 20 Nov 2019 18:43:54 +0100 Subject: statement: make secmark statements idempotent MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Currently lines like ct state new meta secmark set tcp dport map @secmapping_in becomes ct state new secmark name tcp dport map @secmapping_in which is not correct. Fixes: 3bc84e5c1fdd ("src: add support for setting secmark") Signed-off-by: Christian Göttsche Signed-off-by: Pablo Neira Ayuso --- src/statement.c | 3 +++ 1 file changed, 3 insertions(+) (limited to 'src/statement.c') diff --git a/src/statement.c b/src/statement.c index af84e06c..be35bcef 100644 --- a/src/statement.c +++ b/src/statement.c @@ -233,6 +233,9 @@ static void objref_stmt_print(const struct stmt *stmt, struct output_ctx *octx) case NFT_OBJECT_CT_EXPECT: nft_print(octx, "ct expectation set "); break; + case NFT_OBJECT_SECMARK: + nft_print(octx, "meta secmark set "); + break; default: nft_print(octx, "%s name ", objref_type_name(stmt->objref.type)); -- cgit v1.2.3