[netcf-devel] [PATCH] * src/drv_initscripts.c (bridge_physdevs): handle empty iptables file
lutter at redhat.com
lutter at redhat.com
Tue Jun 29 00:11:37 UTC 2010
From: David Lutterkort <lutter at redhat.com>
The logic for writing the content for an empty/nonexistent iptables file
was there already, but the detection of whether we had a preexisting or
empty iptables file was broken.
Fixes BZ 582905
---
src/drv_initscripts.c | 7 +++----
1 files changed, 3 insertions(+), 4 deletions(-)
diff --git a/src/drv_initscripts.c b/src/drv_initscripts.c
index ceba52c..6a1453a 100644
--- a/src/drv_initscripts.c
+++ b/src/drv_initscripts.c
@@ -432,12 +432,11 @@ static void bridge_physdevs(struct netcf *ncf) {
}
if (! use_lokkit) {
- defnode(ncf, "ipt_filter", NULL, "$iptables/table[. = 'filter']");
+ int created = defnode(ncf, "ipt_filter", NULL,
+ "$iptables/table[. = 'filter']");
ERR_BAIL(ncf);
- nmatches = aug_match(aug, "$ipt_filter", NULL);
- ERR_COND_BAIL(nmatches < 0, ncf, EOTHER);
- if (nmatches == 0) {
+ if (created) {
r = aug_set(aug, "$ipt_filter", "filter");
ERR_COND_BAIL(r < 0, ncf, EOTHER);
r = aug_set(aug, "$ipt_filter/chain[1]", "INPUT");
--
1.6.6.1
More information about the netcf-devel
mailing list