From ed4882794e0f9153423dd933da8ec15bba734933 Mon Sep 17 00:00:00 2001 From: Pablo Neira Ayuso Date: Tue, 18 May 2021 14:31:58 +0200 Subject: datatype: skip cgroupv2 rootfs in listing cgroupv2 path is expressed from the /sys/fs/cgroup folder, update listing to skip it. # nft add rule x y socket cgroupv2 level 1 "user.slice" counter # nft list ruleset table ip x { chain y { type filter hook input priority filter; policy accept; socket cgroupv2 level 1 "user.slice" counter } } Signed-off-by: Pablo Neira Ayuso --- src/datatype.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'src') diff --git a/src/datatype.c b/src/datatype.c index 743505de..7267d608 100644 --- a/src/datatype.c +++ b/src/datatype.c @@ -1382,7 +1382,8 @@ static void cgroupv2_type_print(const struct expr *expr, cgroup_path = cgroupv2_get_path(SYSFS_CGROUPSV2_PATH, id); if (cgroup_path) - nft_print(octx, "\"%s\"", cgroup_path); + nft_print(octx, "\"%s\"", + &cgroup_path[strlen(SYSFS_CGROUPSV2_PATH) + 1]); else nft_print(octx, "%" PRIu64, id); -- cgit v1.2.3