xtables: policy can be changed only on builtin chain
Signed-off-by: Tomasz Bursztyka <tomasz.bursztyka@linux.intel.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
diff --git a/iptables/nft.c b/iptables/nft.c
index 7e1b47b..5495115 100644
--- a/iptables/nft.c
+++ b/iptables/nft.c
@@ -503,16 +503,9 @@
c = nft_chain_builtin_alloc(_t, _c, policy);
if (c == NULL)
return -1;
-
} else {
- /* This is a custom chain */
- c = nft_chain_alloc();
- if (c == NULL)
- return -1;
-
- nft_chain_attr_set(c, NFT_CHAIN_ATTR_TABLE, (char *)table);
- nft_chain_attr_set(c, NFT_CHAIN_ATTR_NAME, (char *)chain);
- nft_chain_attr_set_u32(c, NFT_CHAIN_ATTR_POLICY, policy);
+ errno = ENOENT;
+ return -1;
}
if (counters) {
