firewall: fix generate of admin chain comment
Signed-off-by: Dan Williams <dcbw@redhat.com>
This commit is contained in:
parent
e1f8f9bee5
commit
2bd04cb92f
@ -57,7 +57,7 @@ func ensureFirstChainRule(ipt *iptables.IPTables, chain string, rule []string) e
|
|||||||
|
|
||||||
func (ib *iptablesBackend) setupChains(ipt *iptables.IPTables) error {
|
func (ib *iptablesBackend) setupChains(ipt *iptables.IPTables) error {
|
||||||
privRule := generateFilterRule(ib.privChainName)
|
privRule := generateFilterRule(ib.privChainName)
|
||||||
adminRule := generateFilterRule(ib.adminChainName)
|
adminRule := generateAdminRule(ib.adminChainName)
|
||||||
|
|
||||||
// Ensure our private chains exist
|
// Ensure our private chains exist
|
||||||
if err := utils.EnsureChain(ipt, "filter", ib.privChainName); err != nil {
|
if err := utils.EnsureChain(ipt, "filter", ib.privChainName); err != nil {
|
||||||
@ -165,7 +165,7 @@ func (ib *iptablesBackend) checkRules(conf *FirewallNetConf, result *current.Res
|
|||||||
}
|
}
|
||||||
|
|
||||||
// Ensure our admin override chain rule exists in our private chain
|
// Ensure our admin override chain rule exists in our private chain
|
||||||
adminRule := generateFilterRule(ib.adminChainName)
|
adminRule := generateAdminRule(ib.adminChainName)
|
||||||
adminExists, err := ipt.Exists("filter", ib.privChainName, adminRule...)
|
adminExists, err := ipt.Exists("filter", ib.privChainName, adminRule...)
|
||||||
if err != nil {
|
if err != nil {
|
||||||
return err
|
return err
|
||||||
|
Loading…
x
Reference in New Issue
Block a user