From 60c18c2aab0cf1a6a7ce2d58d87df046a675d81a Mon Sep 17 00:00:00 2001 From: Daniel Wagner Date: Wed, 6 Mar 2013 16:08:54 +0100 Subject: [PATCH] iptables: Valid policies are only ACCEPT and DROP --- src/iptables.c | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/src/iptables.c b/src/iptables.c index 158dcf3..734ebc1 100644 --- a/src/iptables.c +++ b/src/iptables.c @@ -1061,8 +1061,13 @@ static int iptables_change_policy(struct connman_iptables *table, int verdict; verdict = target_to_verdict(policy); - if (verdict == 0) + switch (verdict) { + case -NF_ACCEPT - 1: + case -NF_DROP - 1: + break; + default: return -EINVAL; + } chain_head = find_chain_head(table, chain_name); if (chain_head == NULL) -- 2.7.4