From: Christian Göttsche <cgzones@googlemail.com>
Date: Wed, 20 Nov 2019 17:43:54 +0000 (+0100)
Subject: statement: make secmark statements idempotent
X-Git-Tag: v0.9.3~12
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=3a7bdd02207f7ae6cd74af8c313d6d0f8f66f4be;p=thirdparty%2Fnftables.git

statement: make secmark statements idempotent

Currently lines like

    ct state new meta secmark set tcp dport map @secmapping_in

becomes

    ct state new secmark name tcp dport map @secmapping_in

which is not correct.

Fixes: 3bc84e5c1fdd ("src: add support for setting secmark")
Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
---

diff --git a/src/statement.c b/src/statement.c
index af84e06c..be35bcef 100644
--- a/src/statement.c
+++ b/src/statement.c
@@ -233,6 +233,9 @@ static void objref_stmt_print(const struct stmt *stmt, struct output_ctx *octx)
 	case NFT_OBJECT_CT_EXPECT:
 		nft_print(octx, "ct expectation set ");
 		break;
+	case NFT_OBJECT_SECMARK:
+		nft_print(octx, "meta secmark set ");
+		break;
 	default:
 		nft_print(octx, "%s name ",
 			  objref_type_name(stmt->objref.type));