netfilter: nfnl_cthelper: fix runtime expectation policy updates
authorPablo Neira Ayuso <pablo@netfilter.org>
Tue, 21 Mar 2017 12:32:37 +0000 (13:32 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Mon, 25 Dec 2017 13:22:11 +0000 (14:22 +0100)
commitb9fd3306a5afe33fe4ca7fb4d6954475a772a382
tree822a20cb7fc66b67024950a8e4c30bc83fc9b745
parente598cdd240a071888dd8ac485233b5da7a609f29
netfilter: nfnl_cthelper: fix runtime expectation policy updates

[ Upstream commit 2c422257550f123049552b39f7af6e3428a60f43 ]

We only allow runtime updates of expectation policies for timeout and
maximum number of expectations, otherwise reject the update.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Acked-by: Liping Zhang <zlpnobody@gmail.com>
Signed-off-by: Sasha Levin <alexander.levin@verizon.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/netfilter/nfnetlink_cthelper.c