Phil Sutter <p...@nwl.cc> wrote: > Another corner-case found when extending restore ordering test: If a > delete command in a dump referenced a rule added earlier within the same > dump, kernel would reject the resulting NFT_MSG_DELRULE command. > > Catch this by assigning the rule to delete a RULE_ID value if it doesn't > have a handle yet. Since __nft_rule_del() does not duplicate the > nftnl_rule object when creating the NFT_COMPAT_RULE_DELETE command, this > RULE_ID value is added to both NEWRULE and DELRULE commands - exactly > what is needed to establish the reference.
Acked-by: Florian Westphal <f...@strlen.de>
