netfilter: nfnl_cthelper: fix runtime expectation policy updates
authorPablo Neira Ayuso <pablo@netfilter.org>
Tue, 21 Mar 2017 12:32:37 +0000 (13:32 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Mon, 25 Dec 2017 13:20:06 +0000 (14:20 +0100)
commit09bb6f008d020f991406db5c9cba52441d0ba0a3
tree6c09638784b2292087bc0ffd5485ddacfc88acf6
parentcc77cb865cfe83b1d7f412a49c6a8bc01a21e280
netfilter: nfnl_cthelper: fix runtime expectation policy updates

[ Upstream commit 2c422257550f123049552b39f7af6e3428a60f43 ]

We only allow runtime updates of expectation policies for timeout and
maximum number of expectations, otherwise reject the update.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Acked-by: Liping Zhang <zlpnobody@gmail.com>
Signed-off-by: Sasha Levin <alexander.levin@verizon.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/netfilter/nfnetlink_cthelper.c