netfilter: nf_tables: add support to destroy operation
authorFernando Fernandez Mancera <ffmancera@riseup.net>
Mon, 2 Jan 2023 14:42:34 +0000 (15:42 +0100)
committerFlorian Westphal <fw@strlen.de>
Wed, 18 Jan 2023 12:09:00 +0000 (13:09 +0100)
commitf80a612dd77c4585171e44a06b490466bdeec1ae
treeb85546ff41d74f043dd57b5e4a1f5c242d327e96
parentd9e7891476057b24a1acbf10a491e5b9a1c4ae77
netfilter: nf_tables: add support to destroy operation

Introduce NFT_MSG_DESTROY* message type. The destroy operation performs a
delete operation but ignoring the ENOENT errors.

This is useful for the transaction semantics, where failing to delete an
object which does not exist results in aborting the transaction.

This new command allows the transaction to proceed in case the object
does not exist.

Signed-off-by: Fernando Fernandez Mancera <ffmancera@riseup.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Florian Westphal <fw@strlen.de>
include/uapi/linux/netfilter/nf_tables.h
net/netfilter/nf_tables_api.c