1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
|
/*
* Copyright (c) 2017 JingPiao Chen <chenjingpiao@gmail.com>
* Copyright (c) 2017-2018 The strace developers.
* All rights reserved.
*
* SPDX-License-Identifier: GPL-2.0-or-later
*/
#include "tests.h"
#ifdef HAVE_LINUX_NETFILTER_NF_TABLES_H
# include <stdio.h>
# include <sys/socket.h>
# include "netlink.h"
# include <linux/netfilter/nfnetlink.h>
# include <linux/netfilter/nf_tables.h>
static void
test_nlmsg_type(const int fd)
{
long rc;
struct nlmsghdr nlh = {
.nlmsg_len = sizeof(nlh),
.nlmsg_flags = NLM_F_REQUEST,
};
nlh.nlmsg_type = NFNL_SUBSYS_NFTABLES << 8 | NFT_MSG_NEWTABLE;
rc = sendto(fd, &nlh, nlh.nlmsg_len, MSG_DONTWAIT, NULL, 0);
printf("sendto(%d, {len=%u"
", type=NFNL_SUBSYS_NFTABLES<<8|NFT_MSG_NEWTABLE"
", flags=NLM_F_REQUEST, seq=0, pid=0}"
", %u, MSG_DONTWAIT, NULL, 0) = %s\n",
fd, nlh.nlmsg_len, nlh.nlmsg_len, sprintrc(rc));
nlh.nlmsg_type = NFNL_SUBSYS_NFTABLES << 8 | 0xff;
rc = sendto(fd, &nlh, nlh.nlmsg_len, MSG_DONTWAIT, NULL, 0);
printf("sendto(%d, {len=%u"
", type=NFNL_SUBSYS_NFTABLES<<8|0xff /* NFT_MSG_??? */"
", flags=NLM_F_REQUEST, seq=0, pid=0}"
", %u, MSG_DONTWAIT, NULL, 0) = %s\n",
fd, nlh.nlmsg_len, nlh.nlmsg_len, sprintrc(rc));
}
static void
test_nlmsg_flags(const int fd)
{
long rc;
struct nlmsghdr nlh = {
.nlmsg_len = sizeof(nlh),
};
nlh.nlmsg_type = NFNL_SUBSYS_NFTABLES << 8 | NFT_MSG_NEWTABLE;
nlh.nlmsg_flags = NLM_F_REQUEST | NLM_F_REPLACE;
rc = sendto(fd, &nlh, nlh.nlmsg_len, MSG_DONTWAIT, NULL, 0);
printf("sendto(%d, {len=%u"
", type=NFNL_SUBSYS_NFTABLES<<8|NFT_MSG_NEWTABLE"
", flags=NLM_F_REQUEST|NLM_F_REPLACE, seq=0, pid=0}"
", %u, MSG_DONTWAIT, NULL, 0) = %s\n",
fd, nlh.nlmsg_len, nlh.nlmsg_len, sprintrc(rc));
nlh.nlmsg_type = NFNL_SUBSYS_NFTABLES << 8 | NFT_MSG_GETTABLE;
nlh.nlmsg_flags = NLM_F_REQUEST | NLM_F_DUMP;
rc = sendto(fd, &nlh, nlh.nlmsg_len, MSG_DONTWAIT, NULL, 0);
printf("sendto(%d, {len=%u"
", type=NFNL_SUBSYS_NFTABLES<<8|NFT_MSG_GETTABLE"
", flags=NLM_F_REQUEST|NLM_F_DUMP, seq=0, pid=0}"
", %u, MSG_DONTWAIT, NULL, 0) = %s\n",
fd, nlh.nlmsg_len, nlh.nlmsg_len, sprintrc(rc));
nlh.nlmsg_type = NFNL_SUBSYS_NFTABLES << 8 | NFT_MSG_DELTABLE;
nlh.nlmsg_flags = NLM_F_REQUEST | NLM_F_NONREC;
rc = sendto(fd, &nlh, nlh.nlmsg_len, MSG_DONTWAIT, NULL, 0);
printf("sendto(%d, {len=%u"
", type=NFNL_SUBSYS_NFTABLES<<8|NFT_MSG_DELTABLE"
", flags=NLM_F_REQUEST|NLM_F_NONREC, seq=0, pid=0}"
", %u, MSG_DONTWAIT, NULL, 0) = %s\n",
fd, nlh.nlmsg_len, nlh.nlmsg_len, sprintrc(rc));
}
int
main(void)
{
skip_if_unavailable("/proc/self/fd/");
int fd = create_nl_socket(NETLINK_NETFILTER);
test_nlmsg_type(fd);
test_nlmsg_flags(fd);
puts("+++ exited with 0 +++");
return 0;
}
#else
SKIP_MAIN_UNDEFINED("HAVE_LINUX_NETFILTER_NF_TABLES_H")
#endif
|
