]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
netfilter: nft_dynset: add timeout extension to template
authorPablo Neira Ayuso <pablo@netfilter.org>
Sat, 16 Jan 2021 18:20:15 +0000 (19:20 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 3 Feb 2021 22:23:25 +0000 (23:23 +0100)
commit95b1e6e1ffe99f4a69e2decf4b37ab63c3a06372
tree5b2159d383ec961775f9cc9e812681c2420fc17a
parentccdabbf516f36a1a3793eda1e5284a8d170ea5dc
netfilter: nft_dynset: add timeout extension to template

commit 0c5b7a501e7400869ee905b4f7af3d6717802bcb upstream.

Otherwise, the newly create element shows no timeout when listing the
ruleset. If the set definition does not specify a default timeout, then
the set element only shows the expiration time, but not the timeout.
This is a problem when restoring a stateful ruleset listing since it
skips the timeout policy entirely.

Fixes: 22fe54d5fefc ("netfilter: nf_tables: add support for dynamic set updates")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/netfilter/nft_dynset.c