On Wed, Mar 08, 2017 at 01:31:51PM +0100, Phil Sutter wrote: > Oh man, I just found the cause: I was running iptables-translate as > unprivileged user. Calling it with sudo magically makes everything work. > > I'll have a look whether it's possible to communicate the received > -EPERM back to the user. I wonder how iptables should deal with this situation - in a regular use-case, I guess the program will abort eventually anyway but for iptables-translate it shouldn't really matter. So do you think it's OK to make nft_compatible_revision() return 0 if it made it past mnl_cb_run() and errno is EPERM? Ideally it should warn as well, of course. Cheers, Phil -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
