On Fri, Sep 27, 2019 at 04:20:27PM +0200, Florian Westphal wrote: > Phil Sutter <p...@nwl.cc> wrote: > > Another corner-case found when extending restore ordering test: If a > > delete command in a dump referenced a rule added earlier within the same > > dump, kernel would reject the resulting NFT_MSG_DELRULE command. > > > > Catch this by assigning the rule to delete a RULE_ID value if it doesn't > > have a handle yet. Since __nft_rule_del() does not duplicate the > > nftnl_rule object when creating the NFT_COMPAT_RULE_DELETE command, this > > RULE_ID value is added to both NEWRULE and DELRULE commands - exactly > > what is needed to establish the reference. > > Acked-by: Florian Westphal <f...@strlen.de>
Acked-by: Pablo Neira Ayuso <pa...@netfilter.org>
