diff options
author | Phil Sutter <phil@nwl.cc> | 2025-01-09 18:31:36 +0100 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2025-01-19 16:41:54 +0100 |
commit | fc0133428e7ad65aa6b7c8e65ccfe86e469e4512 (patch) | |
tree | ae33db1dbf7355775d5a50a2a769234a0fa27d56 /tools/perf/scripts/python/export-to-sqlite.py | |
parent | bc87b75847d86f073a3df56e4ad44265b3d64e44 (diff) |
netfilter: nf_tables: Tolerate chains with no remaining hooks
Do not drop a netdev-family chain if the last interface it is registered
for vanishes. Users dumping and storing the ruleset upon shutdown to
restore it upon next boot may otherwise lose the chain and all contained
rules. They will still lose the list of devices, a later patch will fix
that. For now, this aligns the event handler's behaviour with that for
flowtables.
The controversal situation at netns exit should be no problem here:
event handler will unregister the hooks, core nftables cleanup code will
drop the chain itself.
Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'tools/perf/scripts/python/export-to-sqlite.py')
0 files changed, 0 insertions, 0 deletions