libvirt/src/nwfilter
Stefan Berger b00f41a1d2 nwfilter: Instantiate comments in ip(6)tables rules
In this patch I am extending the rule instantiator to create the comment
node where supported, which is the case for iptables and ip6tables.

Since commands are written in the format

cmd='iptables ...-m comment --comment \"\" '

certain characters ('`) in the comment need to be escaped to
prevent comments from becoming commands themselves or cause other
forms of (bash) substitutions. I have tested this with various input and in
my tests the input made it straight into the comment. A test case for TCK
will be provided separately that tests this.
2010-09-30 15:56:09 -04:00
..
nwfilter_driver.c nwfilter: use consistent OOM reporting 2010-08-19 13:14:41 -06:00
nwfilter_driver.h filter new files through cppi, so syntax-check passes once again 2010-03-26 22:47:30 +01:00
nwfilter_ebiptables_driver.c nwfilter: Instantiate comments in ip(6)tables rules 2010-09-30 15:56:09 -04:00
nwfilter_ebiptables_driver.h nwfilter: Instantiate comments in ip(6)tables rules 2010-09-30 15:56:09 -04:00
nwfilter_gentech_driver.c nwfilter: skip some interfaces on filter update 2010-05-03 18:14:58 -04:00
nwfilter_gentech_driver.h nwfilter: fix loadable module support 2010-06-21 14:18:31 -04:00
nwfilter_learnipaddr.c nwfilter: remove recently added workaround define for macos x 2010-09-28 22:41:11 +10:00
nwfilter_learnipaddr.h nwfilter: extend nwfilter reload support 2010-08-16 12:59:54 -04:00