[netcf-devel] [PATCH] * src/drv_initscripts.c (bridge_physdevs): handle empty iptables file
Laine Stump
laine at laine.org
Tue Jun 29 01:08:12 UTC 2010
On 06/28/2010 08:11 PM, lutter at redhat.com wrote:
> From: David Lutterkort<lutter at redhat.com>
>
> The logic for writing the content for an empty/nonexistent iptables file
> was there already, but the detection of whether we had a preexisting or
> empty iptables file was broken.
>
> Fixes BZ 582905
> ---
> src/drv_initscripts.c | 7 +++----
> 1 files changed, 3 insertions(+), 4 deletions(-)
>
> diff --git a/src/drv_initscripts.c b/src/drv_initscripts.c
> index ceba52c..6a1453a 100644
> --- a/src/drv_initscripts.c
> +++ b/src/drv_initscripts.c
> @@ -432,12 +432,11 @@ static void bridge_physdevs(struct netcf *ncf) {
> }
>
> if (! use_lokkit) {
> - defnode(ncf, "ipt_filter", NULL, "$iptables/table[. = 'filter']");
> + int created = defnode(ncf, "ipt_filter", NULL,
> + "$iptables/table[. = 'filter']");
> ERR_BAIL(ncf);
>
> - nmatches = aug_match(aug, "$ipt_filter", NULL);
> - ERR_COND_BAIL(nmatches< 0, ncf, EOTHER);
> - if (nmatches == 0) {
> + if (created) {
> r = aug_set(aug, "$ipt_filter", "filter");
> ERR_COND_BAIL(r< 0, ncf, EOTHER);
> r = aug_set(aug, "$ipt_filter/chain[1]", "INPUT");
ACK. Tested and pushed. Thanks!
More information about the netcf-devel
mailing list