netfilter: nfnl_cthelper: fix runtime expectation policy updates
authorPablo Neira Ayuso <pablo@netfilter.org>
Tue, 21 Mar 2017 12:32:37 +0000 (13:32 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Mon, 25 Dec 2017 13:23:38 +0000 (14:23 +0100)
commitec38fb443a091ac99d0d8bc3867db690c8f07fe4
tree5578b0750365876b391074ceb73ee44849649d77
parent02197d86c56db3819832b1fb97aa86501d767c99
netfilter: nfnl_cthelper: fix runtime expectation policy updates

[ Upstream commit 2c422257550f123049552b39f7af6e3428a60f43 ]

We only allow runtime updates of expectation policies for timeout and
maximum number of expectations, otherwise reject the update.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Acked-by: Liping Zhang <zlpnobody@gmail.com>
Signed-off-by: Sasha Levin <alexander.levin@verizon.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/netfilter/nfnetlink_cthelper.c