This is a respin of my original series after getting rid of a few
initial ("fallout") patches. It implements structs nft_chain and
nft_chain_list to avoid changes to libnftnl as requested. Obviously this
introduces some code duplication as some bits from libnftnl have to be
replicated within iptables now.
Phil Sutter (10):
nft: Fix selective chain compatibility checks
nft: Implement nft_chain_foreach()
nft: cache: Introduce nft_cache_add_chain()
nft: Eliminate nft_chain_list_get()
nft: cache: Move nft_chain_find() over
nft: Introduce struct nft_chain
nft: Introduce a dedicated base chain array
nft: cache: Sort custom chains by name
tests: shell: Drop any dump sorting in place
nft: Avoid pointless table/chain creation
iptables/Makefile.am | 2 +-
iptables/nft-cache.c | 165 +++++---
iptables/nft-cache.h | 11 +-
iptables/nft-chain.c | 59 +++
iptables/nft-chain.h | 87 ++++
iptables/nft.c | 382 ++++++++++--------
iptables/nft.h | 10 +-
.../ebtables/0002-ebtables-save-restore_0 | 2 +-
.../firewalld-restore/0001-firewalld_0 | 17 +-
.../ipt-restore/0007-flush-noflush_0 | 4 +-
.../ipt-restore/0014-verbose-restore_0 | 2 +-
iptables/xtables-save.c | 8 +-
12 files changed, 494 insertions(+), 255 deletions(-)
create mode 100644 iptables/nft-chain.c
create mode 100644 iptables/nft-chain.h
--
2.28.0
