@@ -744,6 +744,7 @@ __nft_chain_set(struct nft_handle *h, const char *table,
}
nlh = nft_chain_nlmsg_build_hdr(buf, NFT_MSG_NEWCHAIN, h->family,
+ h->restore ? NLM_F_ACK|NLM_F_CREATE :
NLM_F_ACK, h->seq);
nft_chain_nlmsg_build_payload(nlh, c);
@@ -34,6 +34,7 @@ struct nft_handle {
struct mnl_nlmsg_batch *batch;
struct nft_family_ops *ops;
struct builtin_table *tables;
+ bool restore;
};
extern struct builtin_table xtables_ipv4[TABLES_MAX];
@@ -170,6 +170,7 @@ xtables_restore_main(int family, const char *progname, int argc, char *argv[])
{
struct nft_handle h = {
.family = family,
+ .restore = true,
};
char buffer[10240];
int c;
nft_chain_set() is directly used in xtables-restore.c, however at that point no builtin chains have been created yet thus the need to request to create it relevantly. Signed-off-by: Tomasz Bursztyka <tomasz.bursztyka@linux.intel.com> --- iptables/nft.c | 1 + iptables/nft.h | 1 + iptables/xtables-restore.c | 1 + 3 files changed, 3 insertions(+)