On 04.08, Pablo Neira Ayuso wrote: > Use the generation mask approach to obtain a consistent list of set objects > from netlink dump commands. > > Get rid of the internal NFT_SET_INACTIVE flag. In this case I don't see how deletion and creation in the same batch will work at all since we don't check any active bits in nf_tables_newset(). We also have the problem that f.i. delset checks for activeness in the current instead of the next generation. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
