From: Pablo Neira Ayuso <pablo@netfilter.org>
Date: Tue, 18 May 2021 12:31:58 +0000 (+0200)
Subject: datatype: skip cgroupv2 rootfs in listing
X-Git-Tag: v0.9.9~15
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=ed4882794e0f9153423dd933da8ec15bba734933;p=thirdparty%2Fnftables.git

datatype: skip cgroupv2 rootfs in listing

cgroupv2 path is expressed from the /sys/fs/cgroup folder, update
listing to skip it.

 # nft add rule x y socket cgroupv2 level 1 "user.slice" counter
 # nft list ruleset
 table ip x {
        chain y {
                type filter hook input priority filter; policy accept;
                socket cgroupv2 level 1 "user.slice" counter
        }
 }

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
---

diff --git a/src/datatype.c b/src/datatype.c
index 743505de..7267d608 100644
--- a/src/datatype.c
+++ b/src/datatype.c
@@ -1382,7 +1382,8 @@ static void cgroupv2_type_print(const struct expr *expr,
 
 	cgroup_path = cgroupv2_get_path(SYSFS_CGROUPSV2_PATH, id);
 	if (cgroup_path)
-		nft_print(octx, "\"%s\"", cgroup_path);
+		nft_print(octx, "\"%s\"",
+			  &cgroup_path[strlen(SYSFS_CGROUPSV2_PATH) + 1]);
 	else
 		nft_print(octx, "%" PRIu64, id);