path: root/extensions
diff options
authorPhil Sutter <>2022-01-18 22:39:08 +0100
committerPhil Sutter <>2022-01-20 11:39:30 +0100
commit26ecdf53960658771c0fc582f72a4025e2887f75 (patch)
treebf88b64f89db8e71653dbd2050190587f0105bc3 /extensions
parentb32ae771c8cd7f0b72e4e21cd7d388c745fbae41 (diff)
xshared: Fix response to unprivileged users
Expected behaviour in both variants is: * Print help without error, append extension help if -m and/or -j options are present * Indicate lack of permissions in an error message for anything else With iptables-nft, this was broken basically from day 1. Shared use of do_parse() then somewhat broke legacy: it started complaining about inability to create a lock file. Fix this by making iptables-nft assume extension revision 0 is present if permissions don't allow to verify. This is consistent with legacy. Second part is to exit directly after printing help - this avoids having to make the following code "nop-aware" to prevent privileged actions. Signed-off-by: Phil Sutter <> Reviewed-by: Florian Westphal <>
Diffstat (limited to 'extensions')
0 files changed, 0 insertions, 0 deletions