]> git.hungrycats.org Git - linux/commit
netfilter: nf_tables: bogus ENOENT when destroying element which does not exist
authorPablo Neira Ayuso <pablo@netfilter.org>
Mon, 13 Nov 2023 19:34:56 +0000 (20:34 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 28 Nov 2023 17:14:56 +0000 (17:14 +0000)
commit72caa17c14b422da8eb41eee1d6b4babf0abf6cd
tree076573016068f6b23e08bcf3286e4d29e7e460ae
parent1a605657adc58b3c8e2c1c66aaa5fecd29072135
netfilter: nf_tables: bogus ENOENT when destroying element which does not exist

[ Upstream commit a7d5a955bfa854ac6b0c53aaf933394b4e6139e4 ]

destroy element command bogusly reports ENOENT in case a set element
does not exist. ENOENT errors are skipped, however, err is still set
and propagated to userspace.

 # nft destroy element ip raw BLACKLIST { 1.2.3.4 }
 Error: Could not process rule: No such file or directory
 destroy element ip raw BLACKLIST { 1.2.3.4 }
 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Fixes: f80a612dd77c ("netfilter: nf_tables: add support to destroy operation")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/netfilter/nf_tables_api.c