Commit dceababa authored by Pablo Neira Ayuso's avatar Pablo Neira Ayuso
Browse files

netfilter: nftables: fix netlink report logic in flowtable and genid 



The netlink report should be sent regardless the available listeners.

Fixes: 84d7fce6 ("netfilter: nf_tables: export rule-set generation ID")
Fixes: 3b49e2e9 ("netfilter: nf_tables: add flow table netlink frontend")
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
parent 07e08873

net/netfilter/nf_tables_api.c

+2 −2
Original line number Diff line number Diff line
@@ -7137,7 +7137,7 @@ static void nf_tables_flowtable_notify(struct nft_ctx *ctx, 
			GFP_KERNEL);

	kfree(buf);



	if (ctx->report &&

	if (!ctx->report &&

	    !nfnetlink_has_listeners(ctx->net, NFNLGRP_NFTABLES))

		return;
@@ -7259,7 +7259,7 @@ static void nf_tables_gen_notify(struct net *net, struct sk_buff *skb, 
	audit_log_nfcfg("?:0;?:0", 0, net->nft.base_seq,

			AUDIT_NFT_OP_GEN_REGISTER, GFP_KERNEL);



	if (nlmsg_report(nlh) &&

	if (!nlmsg_report(nlh) &&

	    !nfnetlink_has_listeners(net, NFNLGRP_NFTABLES))

		return;