const NFT_READS: [u16; 8];Expand description
The nftables messages that only read (enum nf_tables_msg_types):
GETTABLE 1, GETCHAIN 4, GETRULE 7, GETSET 10, GETSETELEM 13, GETGEN 16,
GETOBJ 19, GETFLOWTABLE 23. Listed, not computed: the numbering stopped
following a pattern at NFT_MSG_GETOBJ_RESET. Any other type, a later
kernel’s included, is a change (fail closed). The resets (GETOBJ_RESET
21, GETRULE_RESET 25, GETSETELEM_RESET 33) are changes too: zeroing a
quota or limit can flip a verdict (reviewer, coordinator, Nov 3).
vm-netwatch (n) found GETFLOWTABLE read as a change: nft list made its
caller protecting.