Red Hat Bugzilla – Bug 1571968
nftables: man page implies "insert ... position ..." uses a rule offset
Last modified: 2018-10-30 06:38:37 EDT
This excerpt from the nft man page: RULES [add | insert] rule [family] table chain [position position] statement... replace rule [family] table chain handle handle statement... delete rule [family] table chain handle handle seems to imply that "insert ... position .." should use an offset into the ruleset, but it actually takes a handle just like delete/replace verbs. At minimum the man page should be fixed to read something like [add | insert] rule [family] table chain [position handle] statement... ^^^^^^ to make it clear this is handle, not an index (like iptables).
Upstream commit to backport: commit effb881c9cef28aca47adeec5014e0457507539e Author: Phil Sutter <phil@nwl.cc> Date: Wed May 9 16:03:40 2018 +0200 Deprecate add/insert rule 'position' argument Instead, use 'handle' keyword for the same effect since that is more consistent with respect to replace/delete commands. The old keyword is still supported for backwards compatibility and also listed in man page along with a hint that it shouldn't be used anymore. Signed-off-by: Phil Sutter <phil@nwl.cc> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Based on our e-mail communication, I've just written a draft of a RN description in the Doc Text field. Could you please check it?
Hi Mirek, (In reply to Mirek Jahoda from comment #7) > Based on our e-mail communication, I've just written a draft of a RN > description in the Doc Text field. Could you please check it? Looks good to me, thanks!
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2018:3154