meta-google: nftables-systemd: Fix for missing rules
We need nftables-systemd to execute correctly even if the machine has
no rules installed.
Change-Id: I20d58b721381a2829eaa2baedd5d79e8e0a10fd0
Signed-off-by: William A. Kennington III <wak@google.com>
diff --git a/meta-google/recipes-google/nftables/files/nftables.service b/meta-google/recipes-google/nftables/files/nftables.service
index 7130dea..3830988 100644
--- a/meta-google/recipes-google/nftables/files/nftables.service
+++ b/meta-google/recipes-google/nftables/files/nftables.service
@@ -4,7 +4,7 @@
[Service]
Type=oneshot
RemainAfterExit=yes
-ExecStart=/bin/bash -c 'echo /etc/nftables/*.rules | xargs -n 1 nft -f'
+ExecStart=/bin/bash -c 'shopt -s nullglob; echo /etc/nftables/*.rules | xargs -r -n 1 nft -f'
ExecStop=/bin/bash -c 'nft flush ruleset'
[Install]