[libvirt] [PATCH] nwfilter: avoid direction enforcment for certain types of rules

Eric Blake eblake at redhat.com
Tue Oct 19 20:14:02 UTC 2010


On 10/19/2010 02:05 PM, Stefan Berger wrote:
> Avoid the enforcement of direction if
> - icmp rules specify the type/code information
> - the 'skipMatch' variable is set to 'true'
>
> Index: libvirt-acl/src/nwfilter/nwfilter_ebiptables_driver.c
> ===================================================================
> --- libvirt-acl.orig/src/nwfilter/nwfilter_ebiptables_driver.c
> +++ libvirt-acl/src/nwfilter/nwfilter_ebiptables_driver.c

ACK.

-- 
Eric Blake   eblake at redhat.com    +1-801-349-2682
Libvirt virtualization library http://libvirt.org




More information about the libvir-list mailing list