path: root/src/ct.c
diff options
authorPablo Neira Ayuso <>2016-08-15 13:14:18 +0200
committerPablo Neira Ayuso <>2016-08-18 03:14:08 +0200
commit788c986343bc24bd0272e8aa409121ffe51f1ef3 (patch)
tree42cf0210e9fce93e0a5a951f0012e891fa750b05 /src/ct.c
parentddb1f1f8cdca2e0f70254a5adcc0291907503a36 (diff)
src: quote user-defined strings when used from rule selectors
The following selectors display strings using quotes: * meta iifname * meta oifname * meta ibriport * meta obriport However, the following do not: * meta oif * meta iif * meta skuid * meta skgid * meta iifgroup * meta oifgroup * meta rtclassid * ct label Given they refer to user-defined values, neither keywords nor internal built-in known values, let's quote the output of this. This patch modifies symbolic_constant_print() so we can signal this to indicate if the string needs to be quoted. Signed-off-by: Pablo Neira Ayuso <>
Diffstat (limited to 'src/ct.c')
1 files changed, 1 insertions, 1 deletions
diff --git a/src/ct.c b/src/ct.c
index f6018d87..35755962 100644
--- a/src/ct.c
+++ b/src/ct.c
@@ -108,7 +108,7 @@ static void ct_label_type_print(const struct expr *expr)
for (s = ct_label_tbl->symbols; s->identifier != NULL; s++) {
if (bit != s->value)
- printf("%s", s->identifier);
+ printf("\"%s\"", s->identifier);
/* can happen when connlabel.conf is altered after rules were added */