diff options
| author | Pablo Neira Ayuso | 2018-06-06 15:04:37 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso | 2018-06-06 15:06:01 +0200 |
| commit | 5b94b2bec85f14d3c16d4edb698eae5ca8c3d7a0 (patch) | |
| tree | 2a4f1010c94bd99b1ee1ef4883c7417518fcfde7 /kernel/params.c | |
| parent | netfilter: ebtables: reject non-bridge targets (diff) | |
| parent | netfilter: ipset: forbid family for hash:mac sets (diff) | |
| download | kernel-qcow2-linux-5b94b2bec85f14d3c16d4edb698eae5ca8c3d7a0.tar.gz kernel-qcow2-linux-5b94b2bec85f14d3c16d4edb698eae5ca8c3d7a0.tar.xz kernel-qcow2-linux-5b94b2bec85f14d3c16d4edb698eae5ca8c3d7a0.zip | |
Merge git://blackhole.kfki.hu/nf
Jozsef Kadlecsik says:
====================
ipset patches for nf
- Check hook mask for unsupported hooks instead of supported ones in xt_set.
(Serhey Popovych).
- List/save just timing out entries with "timeout 1" instead of "timeout 0":
zero timeout value means permanent entries. When restoring the elements,
we'd add non-timing out entries. Fixes netfilter bugzilla id #1258.
- Limit max timeout value to (UINT_MAX >> 1)/MSEC_PER_SEC due to the
negative value condition in msecs_to_jiffies(). msecs_to_jiffies()
should be revised: if one wants to set the timeout above 2147483,
msecs_to_jiffies() sets the value to 4294967. (Reported by Maxim Masiutin).
- Forbid family for hash:mac sets in the kernel module: ipset userspace tool
enforces it but third party tools could create sets with this parameter.
Such sets then cannot be listed/saved with ipset itself. (Florent Fourcot)
====================
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'kernel/params.c')
0 files changed, 0 insertions, 0 deletions