diff options
| author | Kevin Krakauer <krakauer@google.com> | 2021-06-17 15:28:51 -0700 |
|---|---|---|
| committer | gVisor bot <gvisor-bot@google.com> | 2021-06-17 15:31:31 -0700 |
| commit | bc27a991851fdffa59f028eecfc22bdd17ccaa55 (patch) | |
| tree | b34989bf166166bfe4063e6210a9309263fd9ec7 /pkg/sentry | |
| parent | 3cf1644a3b4266979b7dda8b6291edf19264fa19 (diff) | |
remove outdated ip6tables TODOs
IPv6 SO_ORIGINAL_DST is supported, and the flag check as-written will detect
when other flags are needed.
Fixes #3549.
PiperOrigin-RevId: 380059115
Diffstat (limited to 'pkg/sentry')
| -rw-r--r-- | pkg/sentry/socket/netfilter/targets.go | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/pkg/sentry/socket/netfilter/targets.go b/pkg/sentry/socket/netfilter/targets.go index 7d83e708f..ea56f39c1 100644 --- a/pkg/sentry/socket/netfilter/targets.go +++ b/pkg/sentry/socket/netfilter/targets.go @@ -418,7 +418,6 @@ func (*nfNATTargetMaker) unmarshal(buf []byte, filter stack.IPHeaderFilter) (tar return nil, syserr.ErrInvalidArgument } - // TODO(gvisor.dev/issue/3549): Check for other flags. // For now, redirect target only supports destination change. if natRange.Flags != linux.NF_NAT_RANGE_PROTO_SPECIFIED { nflog("nfNATTargetMaker: invalid range flags %d", natRange.Flags) |