path: root/iptables/nft-cache.c
diff options
authorPhil Sutter <>2020-07-10 20:08:35 +0200
committerPhil Sutter <>2020-07-24 19:15:49 +0200
commit0b7c22e00622db468846f11809ca0cecc6c7cd97 (patch)
treeed361a57baa34093872d4bf90c588b4187a11fdd /iptables/nft-cache.c
parent26ec09bf6b9b674a7e3a65fc9c12599bd81dfe0f (diff)
nft: Make table creation purely implicit
While asserting a required builtin chain exists, its table is created implicitly if missing. Exploit this from xtables-restore, too: The only actions which need adjustment are chain_new and chain_restore, i.e. when restoring (either builtin or custom) chains. Note: The call to nft_table_builtin_add() wasn't sufficient as it doesn't set the table as initialized and therefore a following call to nft_xt_builtin_init() would override non-default base chain policies. Note2: The 'table_new' callback in 'nft_xt_restore_cb' is left in place as xtables-translate uses it to print an explicit 'add table' command. Note3: nft_table_new() function was already unused since a7f1e208cdf9c ("nft: split parsing from netlink commands"). Signed-off-by: Phil Sutter <>
Diffstat (limited to 'iptables/nft-cache.c')
0 files changed, 0 insertions, 0 deletions