Commit b770283c authored by Pablo Neira Ayuso's avatar Pablo Neira Ayuso
Browse files

netfilter: nf_tables: disallow updates of anonymous sets 



Disallow updates of set timeout and garbage collection parameters for
anonymous sets.

Fixes: 123b9961 ("netfilter: nf_tables: honor set timeout and garbage collection updates")
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
parent 62e1e94b

net/netfilter/nf_tables_api.c

+3 −0
Original line number Diff line number Diff line
@@ -4963,6 +4963,9 @@ static int nf_tables_newset(struct sk_buff *skb, const struct nfnl_info *info, 
		if (info->nlh->nlmsg_flags & NLM_F_REPLACE)

			return -EOPNOTSUPP;



		if (nft_set_is_anonymous(set))

			return -EOPNOTSUPP;



		err = nft_set_expr_alloc(&ctx, set, nla, exprs, &num_exprs, flags);

		if (err < 0)

			return err;