Before patch: # nft list secmarks table inet t { secmark s { system_u:object_r:ssh_server_packet_t:s0 } } After patch: # nft list secmarks table inet t { secmark s { system_u:object_r:ssh_server_packet_t:s0 } } Fixes: 3bc84e5c ("src: add support for setting secmark") Signed-off-by: Eric Jallot <ejallot@xxxxxxxxx> --- src/rule.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/rule.c b/src/rule.c index 5655e8c..255fe37 100644 --- a/src/rule.c +++ b/src/rule.c @@ -1821,6 +1821,7 @@ static void obj_print_data(const struct obj *obj, nft_print(octx, " # handle %" PRIu64, obj->handle.handle.id); nft_print(octx, "%s%s%s", opts->nl, opts->tab, opts->tab); nft_print(octx, "%s", obj->secmark.ctx); + nft_print(octx, "%s", opts->nl); break; case NFT_OBJECT_CT_HELPER: nft_print(octx, " %s {", obj->handle.obj.name); -- 1.8.3.1