| commit | 57de2a0cd9d7e4cfc6479ecbebfcd36dbc61d5ed | [log] [tgz] |
|---|---|---|
| author | Patrick McHardy <kaber@trash.net> | Thu Jan 09 18:42:31 2014 +0000 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Thu Jan 09 20:17:13 2014 +0100 |
| tree | cb7657b0a5752388c10f320db7e2d7db9767cb69 | |
| parent | b38895c5773b00977ca6beff8ebbd2e3f55f1f84 [diff] |
netfilter: nf_tables: split chain policy validation from actually setting it Currently nf_tables_newchain() atomicity is broken because of having validation of some netlink attributes performed after changing attributes of the chain. The chain policy is (currently) fine, but split it up as preparation for the following fixes and to avoid future mistakes. Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>