[PATCH nft 5/5] cache: incorrect cache flags for create commands

[Pablo Neira Ayuso]

 # nft create table testD
 # nft create chain testD test6
 Error: No such file or directory
 create chain testD test6
              ^^^^^

Handle 'create' command just like 'add' and 'insert'. Check for object
types to dump the tables for more fine grain listing, instead of dumping
the whole ruleset.

Fixes: 7df42800cf89 ("src: single cache_update() call to build cache before 
evaluation")
Signed-off-by: Pablo Neira Ayuso <pa...@netfilter.org>
---
 src/cache.c                                        | 30 +++++++++++++++-------
 tests/shell/testcases/chains/0030create_0          |  6 +++++
 .../shell/testcases/chains/dumps/0030create_0.nft  |  4 +++
 3 files changed, 31 insertions(+), 9 deletions(-)
 create mode 100644 tests/shell/testcases/chains/0030create_0
 create mode 100644 tests/shell/testcases/chains/dumps/0030create_0.nft

diff --git a/src/cache.c b/src/cache.c
index d371c5488d1b..e04ead85c830 100644
--- a/src/cache.c
+++ b/src/cache.c
@@ -16,10 +16,29 @@
 static unsigned int evaluate_cache_add(struct cmd *cmd, unsigned int flags)
 {
        switch (cmd->obj) {
+       case CMD_OBJ_CHAIN:
+       case CMD_OBJ_SET:
+       case CMD_OBJ_COUNTER:
+       case CMD_OBJ_QUOTA:
+       case CMD_OBJ_LIMIT:
+       case CMD_OBJ_SECMARK:
+       case CMD_OBJ_FLOWTABLE:
+               flags |= NFT_CACHE_TABLE;
+               break;
        case CMD_OBJ_SETELEM:
-               flags |= NFT_CACHE_SETELEM;
+               flags |= NFT_CACHE_TABLE |
+                        NFT_CACHE_CHAIN |
+                        NFT_CACHE_SET |
+                        NFT_CACHE_OBJECT |
+                        NFT_CACHE_SETELEM;
                break;
        case CMD_OBJ_RULE:
+               flags |= NFT_CACHE_TABLE |
+                        NFT_CACHE_CHAIN |
+                        NFT_CACHE_SET |
+                        NFT_CACHE_OBJECT |
+                        NFT_CACHE_FLOWTABLE;
+
                if (cmd->handle.index.id ||
                    cmd->handle.position.id)
                        flags |= NFT_CACHE_RULE;
@@ -83,18 +102,11 @@ unsigned int cache_evaluate(struct nft_ctx *nft, struct 
list_head *cmds)
                switch (cmd->op) {
                case CMD_ADD:
                case CMD_INSERT:
+               case CMD_CREATE:
                        if (nft_output_echo(&nft->output)) {
                                flags = NFT_CACHE_FULL;
                                break;
                        }
-
-                       flags |= NFT_CACHE_TABLE |
-                                NFT_CACHE_CHAIN |
-                                NFT_CACHE_SET |
-                                NFT_CACHE_FLOWTABLE |
-                                NFT_CACHE_OBJECT;
-                       /* Fall through */
-               case CMD_CREATE:
                        flags = evaluate_cache_add(cmd, flags);
                        break;
                case CMD_REPLACE:
diff --git a/tests/shell/testcases/chains/0030create_0 
b/tests/shell/testcases/chains/0030create_0
new file mode 100644
index 000000000000..0b457f91f11f
--- /dev/null
+++ b/tests/shell/testcases/chains/0030create_0
@@ -0,0 +1,6 @@
+#!/bin/bash
+
+set -e
+
+$NFT add table ip x
+$NFT create chain ip x y
diff --git a/tests/shell/testcases/chains/dumps/0030create_0.nft 
b/tests/shell/testcases/chains/dumps/0030create_0.nft
new file mode 100644
index 000000000000..8e818d2d05e6
--- /dev/null
+++ b/tests/shell/testcases/chains/dumps/0030create_0.nft
@@ -0,0 +1,4 @@
+table ip x {
+       chain y {
+       }
+}
-- 
2.11.0