From 935f82e7dd4911fde6be9dae960fd1d438542a5d Mon Sep 17 00:00:00 2001
From: Phil Sutter <phil@nwl.cc>
Date: Mon, 19 Mar 2018 18:02:02 +0100
Subject: Support 'nft -f -' to read from stdin

In libnftables, detect if given filename is '-' and treat it as the
common way of requesting to read from stdin, then open /dev/stdin
instead. (Calling 'nft -f /dev/stdin' worked before as well, but this
makes it official.)

With this in place and bash's support for here strings, review all tests
in tests/shell for needless use of temp files. Note that two categories
of test cases were intentionally left unchanged:

- Tests creating potentially large rulesets to avoid running into shell
  parameter length limits.
- Tests for 'include' directive for obvious reasons.

Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
---
 doc/nft.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'doc')

diff --git a/doc/nft.xml b/doc/nft.xml
index fb57c2b6..7800890d 100644
--- a/doc/nft.xml
+++ b/doc/nft.xml
@@ -167,7 +167,7 @@ vi:ts=4 sw=4
 				<term><option>-f, --file <replaceable>filename</replaceable></option></term>
 				<listitem>
 					<para>
-						Read input from <replaceable>filename</replaceable>.
+						Read input from <replaceable>filename</replaceable>. If <replaceable>filename</replaceable> is <literal>-</literal>, read from <literal>stdin</literal>.
 					</para>
 					<para>
 						nft scripts must start <command>#!/usr/sbin/nft -f</command>
-- 
cgit v1.2.3