mirrors/poky
1
0
Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-01-29 21:08:42 +01:00
Code Issues Packages Projects Releases Wiki Activity

iptables: fix save/restore symlinks with libnftnl PACKAGECONFIG enabled

Browse Source 
When the libnftnl PACKAGECONFIG is enabled, the "iptables" symlink is correctly
points to xtables-nft-multi, however the "iptables-save" and
"iptables-restore" are still point to the xtables-legacy-multi.

So, when the "iptables" command is used it's using the nftables backend
where is the "iptables-save/restore" are using the legacy backend.

This is not consistent with other distros (e.g. Ubuntu).

The issue was identified when testing the UFW firewall with nftables backend.

(From OE-Core rev: 2c0d03ed7bb9c17b1c3ccefd00bf3a4ede9e291f)

Signed-off-by: Kirill Yatsenko <kiriyatsenko@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 6579e4333b74232d8b576c399eab88e37da881ac)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
This commit is contained in:
Kirill Yatsenko
2024-06-04 14:06:49 +02:00
committed by Steve Sakoman
parent 0744992e24
commit c861a9f92f
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
meta/recipes-extended/iptables/iptables_1.8.10.bb
View File

@@ -75,6 +75,8 @@ do_install:append() {
# if libnftnl is included, make the iptables symlink point to the nft-based binary by default
if ${@bb.utils.contains('PACKAGECONFIG', 'libnftnl', 'true', 'false', d)} ; then
ln -sf ${sbindir}/xtables-nft-multi ${D}${sbindir}/iptables
ln -sf ${sbindir}/xtables-nft-multi ${D}${sbindir}/iptables-save
ln -sf ${sbindir}/xtables-nft-multi ${D}${sbindir}/iptables-restore
fi
}