interesting
/
nftables
mirror of https://github.com/google/nftables.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

chain: add policy attribute

This commit is contained in:
Michael Stapelberg 2019-07-20 18:32:43 +02:00
parent 7895e345f5
commit 0b03b9847f
1 changed files with 16 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
chain.go
View File

@ -81,6 +81,7 @@ type Chain struct {
Hooknum ChainHook Hooknum ChainHook
Priority ChainPriority Priority ChainPriority
Type ChainType Type ChainType
Policy uint32
} }
// AddChain adds the specified Chain. See also // AddChain adds the specified Chain. See also
@ -93,12 +94,22 @@ func (cc *Conn) AddChain(c *Chain) *Chain {
}) })
if c.Type != "" { if c.Type != "" {
chainHook := cc.marshalAttr([]netlink.Attribute{ hookAttr := []netlink.Attribute{
{Type: unix.NFTA_HOOK_HOOKNUM, Data: binaryutil.BigEndian.PutUint32(uint32(c.Hooknum))}, {Type: unix.NFTA_HOOK_HOOKNUM, Data: binaryutil.BigEndian.PutUint32(uint32(c.Hooknum))},
{Type: unix.NFTA_HOOK_PRIORITY, Data: binaryutil.BigEndian.PutUint32(uint32(c.Priority))}, {Type: unix.NFTA_HOOK_PRIORITY, Data: binaryutil.BigEndian.PutUint32(uint32(c.Priority))},
}) }
data = append(data, cc.marshalAttr([]netlink.Attribute{
{Type: unix.NLA_F_NESTED | unix.NFTA_CHAIN_HOOK, Data: cc.marshalAttr(hookAttr)},
})...)
}
if c.Policy > 0 {
data = append(data, cc.marshalAttr([]netlink.Attribute{
{Type: unix.NFTA_CHAIN_POLICY, Data: binaryutil.BigEndian.PutUint32(uint32(c.Policy))},
})...)
}
if c.Type != "" {
data = append(data, cc.marshalAttr([]netlink.Attribute{ data = append(data, cc.marshalAttr([]netlink.Attribute{
{Type: unix.NLA_F_NESTED | unix.NFTA_CHAIN_HOOK, Data: chainHook},
{Type: unix.NFTA_CHAIN_TYPE, Data: []byte(c.Type + "\x00")}, {Type: unix.NFTA_CHAIN_TYPE, Data: []byte(c.Type + "\x00")},
})...) })...)
} }
@ -186,6 +197,8 @@ func chainFromMsg(msg netlink.Message) (*Chain, error) {
c.Table = &Table{Name: ad.String()} c.Table = &Table{Name: ad.String()}
case unix.NFTA_CHAIN_TYPE: case unix.NFTA_CHAIN_TYPE:
c.Type = ChainType(ad.String()) c.Type = ChainType(ad.String())
case unix.NFTA_CHAIN_POLICY:
c.Policy = uint32(ad.Uint32())
case unix.NFTA_CHAIN_HOOK: case unix.NFTA_CHAIN_HOOK:
ad.Do(func(b []byte) error { ad.Do(func(b []byte) error {
c.Hooknum, c.Priority, err = hookFromMsg(b) c.Hooknum, c.Priority, err = hookFromMsg(b)