@@ -40,6 +40,7 @@ uint64_t nft_rule_attr_get_u64(const struct nft_rule *r, uint16_t attr);
void nft_rule_add_expr(struct nft_rule *r, struct nft_rule_expr *expr);
+void nft_rule_nlmsg_build_id(struct nlmsghdr *nlh, struct nft_rule *t);
void nft_rule_nlmsg_build_payload(struct nlmsghdr *nlh, struct nft_rule *t);
enum {
@@ -72,6 +72,7 @@ global:
nft_rule_parse;
nft_rule_snprintf;
nft_rule_nlmsg_build_hdr;
+ nft_rule_nlmsg_build_id;
nft_rule_nlmsg_build_payload;
nft_rule_nlmsg_parse;
nft_rule_add_expr;
@@ -248,11 +248,8 @@ nft_rule_nlmsg_build_hdr(char *buf, uint16_t cmd, uint16_t family,
}
EXPORT_SYMBOL(nft_rule_nlmsg_build_hdr);
-void nft_rule_nlmsg_build_payload(struct nlmsghdr *nlh, struct nft_rule *r)
+void nft_rule_nlmsg_build_id(struct nlmsghdr *nlh, struct nft_rule *r)
{
- struct nft_rule_expr *expr;
- struct nlattr *nest;
-
if (r->flags & (1 << NFT_RULE_ATTR_TABLE))
mnl_attr_put_strz(nlh, NFTA_RULE_TABLE, r->table);
if (r->flags & (1 << NFT_RULE_ATTR_CHAIN))
@@ -261,6 +258,15 @@ void nft_rule_nlmsg_build_payload(struct nlmsghdr *nlh, struct nft_rule *r)
mnl_attr_put_u64(nlh, NFTA_RULE_HANDLE, htobe64(r->handle));
if (r->flags & (1 << NFT_RULE_ATTR_POSITION))
mnl_attr_put_u64(nlh, NFTA_RULE_POSITION, htobe64(r->position));
+}
+EXPORT_SYMBOL(nft_rule_nlmsg_build_id);
+
+void nft_rule_nlmsg_build_payload(struct nlmsghdr *nlh, struct nft_rule *r)
+{
+ struct nft_rule_expr *expr;
+ struct nlattr *nest;
+
+ nft_rule_nlmsg_build_id(nlh, r);
if (!list_empty(&r->expr_list)) {
nest = mnl_attr_nest_start(nlh, NFTA_RULE_EXPRESSIONS);
This patch adds a new function nft_rule_nlmsg_build_id which can be used to only dump the identifiers of a rule to the netlink message. This allow to limit the size of the messages when doing some deletion operation where the other parameters are not used. Signed-off-by: Eric Leblond <eric@regit.org> --- include/libnftables/rule.h | 1 + src/libnftables.map | 1 + src/rule.c | 14 ++++++++++---- 3 files changed, 12 insertions(+), 4 deletions(-)