Files
linux/net
Phil Sutter 42e344f016 netfilter: nf_tables: Fix for deleting base chains with payload
When deleting a base chain, iptables-nft simply submits the whole chain
to the kernel, including the NFTA_CHAIN_HOOK attribute. The new code
added by fixed commit then turned this into a chain update, destroying
the hook but not the chain itself. Detect the situation by checking if
the chain type is either netdev or inet/ingress.

Fixes: 7d937b1071 ("netfilter: nf_tables: support for deleting devices in an existing netdev chain")
Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2023-06-20 22:43:42 +02:00
..
2023-05-17 21:27:30 -07:00
2023-06-15 15:08:59 -07:00
2023-06-15 15:08:58 -07:00
2023-06-15 15:08:58 -07:00
2023-03-16 17:34:40 -07:00
2023-06-05 15:15:57 +01:00
2023-04-13 16:43:38 -07:00