diff options
| author | Kirill Yatsenko <kiriyatsenko@gmail.com> | 2024-06-04 14:06:49 +0200 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2024-06-10 14:27:23 +0100 |
| commit | 510eb2c3753df7e1be18a590e2a224e847209205 (patch) | |
| tree | 41876fbcf680b488a8848745541bfdd7c07f3b7a | |
| parent | f241982cc6f030c0f6cc1f29c46830adb5e78bb8 (diff) | |
| download | poky-510eb2c3753df7e1be18a590e2a224e847209205.tar.gz | |
iptables: fix save/restore symlinks with libnftnl PACKAGECONFIG enabled
When the libnftnl PACKAGECONFIG is enabled, the "iptables" symlink is correctly
points to xtables-nft-multi, however the "iptables-save" and
"iptables-restore" are still point to the xtables-legacy-multi.
So, when the "iptables" command is used it's using the nftables backend
where is the "iptables-save/restore" are using the legacy backend.
This is not consistent with other distros (e.g. Ubuntu).
The issue was identified when testing the UFW firewall with nftables backend.
(From OE-Core rev: 6579e4333b74232d8b576c399eab88e37da881ac)
Signed-off-by: Kirill Yatsenko <kiriyatsenko@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
| -rw-r--r-- | meta/recipes-extended/iptables/iptables_1.8.10.bb | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/meta/recipes-extended/iptables/iptables_1.8.10.bb b/meta/recipes-extended/iptables/iptables_1.8.10.bb index a9c88582cd..86f1335ac8 100644 --- a/meta/recipes-extended/iptables/iptables_1.8.10.bb +++ b/meta/recipes-extended/iptables/iptables_1.8.10.bb | |||
| @@ -73,6 +73,8 @@ do_install:append() { | |||
| 73 | # if libnftnl is included, make the iptables symlink point to the nft-based binary by default | 73 | # if libnftnl is included, make the iptables symlink point to the nft-based binary by default |
| 74 | if ${@bb.utils.contains('PACKAGECONFIG', 'libnftnl', 'true', 'false', d)} ; then | 74 | if ${@bb.utils.contains('PACKAGECONFIG', 'libnftnl', 'true', 'false', d)} ; then |
| 75 | ln -sf ${sbindir}/xtables-nft-multi ${D}${sbindir}/iptables | 75 | ln -sf ${sbindir}/xtables-nft-multi ${D}${sbindir}/iptables |
| 76 | ln -sf ${sbindir}/xtables-nft-multi ${D}${sbindir}/iptables-save | ||
| 77 | ln -sf ${sbindir}/xtables-nft-multi ${D}${sbindir}/iptables-restore | ||
| 76 | fi | 78 | fi |
| 77 | } | 79 | } |
| 78 | 80 | ||
