Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SetID is missing in both GetSets and GetRules #46

Closed
sbezverk opened this issue Aug 12, 2019 · 1 comment
Closed

SetID is missing in both GetSets and GetRules #46

sbezverk opened this issue Aug 12, 2019 · 1 comment

Comments

@sbezverk
Copy link
Contributor

sbezverk commented Aug 12, 2019

It looks like even though netlink message sent to kernel carries SetID when Set is created or a rule with Lookup expression is created. But when GetRules or GetSets returns information, SetID is always 0. It looks like the return message is missing unix.NFTA_SET_ID attribute. I have done all debugging I could in user land, now need some help from kernel land.
It is a big problem if anonymous sets are used in the same table.

@sbezverk
Copy link
Contributor Author

As it was discovered from nftables source:

* @NFTA_SET_ID: uniquely identifies a set in a transaction (NLA_U32)

SET_ID is set only during the transaction, so it is not available at any other time. This seriously cripples use of Anonymous sets where a name of set is hard coded. With this, no more than one Anonymous set is possible per table.
Closing this issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant