netfilter: nfnl_cthelper: fix runtime expectation policy updates
authorPablo Neira Ayuso <pablo@netfilter.org>
Tue, 21 Mar 2017 12:32:37 +0000 (13:32 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 22 Mar 2017 11:20:16 +0000 (12:20 +0100)
commit2c422257550f123049552b39f7af6e3428a60f43
tree36178148c415c6ec1916ee5adeda4995e35510e0
parentae5c682113f9f94cc5e76f92cf041ee624c173ee
netfilter: nfnl_cthelper: fix runtime expectation policy updates

We only allow runtime updates of expectation policies for timeout and
maximum number of expectations, otherwise reject the update.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Acked-by: Liping Zhang <zlpnobody@gmail.com>
net/netfilter/nfnetlink_cthelper.c