interesting
/
nftables
mirror of https://github.com/google/nftables.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

chain: add policy attribute

This commit is contained in:
Michael Stapelberg 2019-07-20 18:32:43 +02:00
parent 7895e345f5
commit 0b03b9847f
1 changed files with 16 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
chain.go
View File

@ -81,6 +81,7 @@ type Chain struct {
Hooknum ChainHook
Priority ChainPriority
Type ChainType
Policy uint32
}
// AddChain adds the specified Chain. See also
@ -93,12 +94,22 @@ func (cc *Conn) AddChain(c *Chain) *Chain {
})
if c.Type != "" {
chainHook := cc.marshalAttr([]netlink.Attribute{
hookAttr := []netlink.Attribute{
{Type: unix.NFTA_HOOK_HOOKNUM, Data: binaryutil.BigEndian.PutUint32(uint32(c.Hooknum))},
{Type: unix.NFTA_HOOK_PRIORITY, Data: binaryutil.BigEndian.PutUint32(uint32(c.Priority))},
})
}
data = append(data, cc.marshalAttr([]netlink.Attribute{
{Type: unix.NLA_F_NESTED | unix.NFTA_CHAIN_HOOK, Data: cc.marshalAttr(hookAttr)},
})...)
}
if c.Policy > 0 {
data = append(data, cc.marshalAttr([]netlink.Attribute{
{Type: unix.NFTA_CHAIN_POLICY, Data: binaryutil.BigEndian.PutUint32(uint32(c.Policy))},
})...)
}
if c.Type != "" {
data = append(data, cc.marshalAttr([]netlink.Attribute{
{Type: unix.NLA_F_NESTED | unix.NFTA_CHAIN_HOOK, Data: chainHook},
{Type: unix.NFTA_CHAIN_TYPE, Data: []byte(c.Type + "\x00")},
})...)
}
@ -186,6 +197,8 @@ func chainFromMsg(msg netlink.Message) (*Chain, error) {
c.Table = &Table{Name: ad.String()}
case unix.NFTA_CHAIN_TYPE:
c.Type = ChainType(ad.String())
case unix.NFTA_CHAIN_POLICY:
c.Policy = uint32(ad.Uint32())
case unix.NFTA_CHAIN_HOOK:
ad.Do(func(b []byte) error {
c.Hooknum, c.Priority, err = hookFromMsg(b)