| commit | 215a31f19dedd4e92a67cf5a9717ee898d012b3a | [log] [tgz] |
|---|---|---|
| author | Pablo Neira Ayuso <pablo@netfilter.org> | Mon Jun 11 17:18:29 2018 +0200 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Tue Jun 12 19:12:48 2018 +0200 |
| tree | 997446c43106f7d0bf1ddfdbad73a9bfa17f2371 | |
| parent | 3fb61eca185cc65a1be23d9a5a11347eef79f597 [diff] |
netfilter: nft_dynset: do not reject set updates with NFT_SET_EVAL
NFT_SET_EVAL is signalling the kernel that this sets can be updated from
the evaluation path, even if there are no expressions attached to the
element. Otherwise, set updates with no expressions fail. Update
description to describe the right semantics.
Fixes: 22fe54d5fefc ("netfilter: nf_tables: add support for dynamic set updates")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>