2
0
mirror of https://github.com/checkpoint-restore/criu synced 2025-08-22 09:58:09 +00:00

zdtm: socket-tcp-nft-nfconntrack: add a hook to the chain in nft case

Let's use hooked nft chain which actually affects packets.

Fixes: e5f4d8c6f ("test/nfconntrack: use nft or iptables-legacy")
Signed-off-by: Pavel Tikhomirov <ptikhomirov@virtuozzo.com>
This commit is contained in:
Pavel Tikhomirov 2024-01-22 17:50:39 +08:00 committed by Andrei Vagin
parent afc0efcf78
commit d2511707fa

View File

@ -92,7 +92,7 @@ int main(int argc, char **argv)
if (system("nft add table ip filter"))
return 1;
if (system("nft add chain ip filter INPUT"))
if (system("nft 'add chain ip filter INPUT { type filter hook input priority 0 ; }'"))
return 1;
if (system("nft add rule ip filter INPUT iifname \"lo\" ip protocol tcp ct state new,established counter accept"))
return 1;