forked from extern/shorewall_code
450a16f730
In the IP set capability tests, there is a race condition which might prevent the removal of the temporary IP set immediately after flushing the chain that uses this IP set: even though the rules which used the IP set were deleted, the IP set might still appear to be “in use by a kernel component.” In case this happens, we add an extra call to `ipset -X` in the `cleanup_iptables()` function, just to be sure that the temporary IP set is indeed destroyed when the compiler exits. |
||
|---|---|---|
| .. | ||
| Shorewall | ||
| compiler.pl | ||
| getparams | ||
| lib.runtime | ||
| prog.footer | ||