This patch modifies the grammar to explicitly indicate what you want to
export, eg.
# nft export ruleset json
This leaves room to extend this later on to support other object types,
such as integrating conntrack into nft.
This also leaves the syntax in consistent state wrt. other existing
objects. The existing syntax is still preserved.
Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
---
src/parser_bison.y | 8 +++++++-
1 file changed, 7 insertions(+), 1 deletion(-)
diff --git a/src/parser_bison.y b/src/parser_bison.y
index e16b8a3..cd149e7 100644
--- a/src/parser_bison.y
+++ b/src/parser_bison.y
@@ -882,7 +882,13 @@ rename_cmd : CHAIN chain_spec identifier
}
;
-export_cmd : export_format
+export_cmd : RULESET export_format
+ {
+ struct handle h = { .family = NFPROTO_UNSPEC };
+ struct export *export = export_alloc($2);
+ $$ = cmd_alloc(CMD_EXPORT, CMD_OBJ_EXPORT, &h, &@$, export);
+ }
+ | export_format
{
struct handle h = { .family = NFPROTO_UNSPEC };
struct export *export = export_alloc($1);
--
2.1.4
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
