Kevin Cernekee a963d710f3 netfilter: ctnetlink: Fix regression in CTA_STATUS processing ... The libnetfilter_conntrack userland library always sets IPS_CONFIRMED when building a CTA_STATUS attribute. If this toggles the bit from 0->1, the parser will return an error. On Linux 4.4+ this will cause any NFQA_EXP attribute in the packet to be ignored. This breaks conntrackd's userland helpers because they operate on unconfirmed connections. Instead of returning -EBUSY if the user program asks to modify an unchangeable bit, simply ignore the change. Also, fix the logic so that user programs are allowed to clear the bits that they are allowed to change. Signed-off-by: Kevin Cernekee <cernekee@chromium.org> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2017-02-06 12:48:26 +01:00
..
6lowpan
9p
802	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
8021q	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
appletalk
atm	net: atm: Fix warnings in net/atm/lec.c when !CONFIG_PROC_FS	2016-12-28 15:11:32 -05:00
ax25	ax25: Fix segfault after sock connection timeout	2017-01-16 14:39:58 -05:00
batman-adv	batman-adv: Decrease hardif refcnt on fragmentation send error	2017-01-04 08:22:04 +01:00
bluetooth	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2016-12-16 10:24:44 -08:00
bridge	bridge: netlink: call br_changelink() during br_dev_newlink()	2017-01-20 15:07:27 -05:00
caif
can	can: bcm: fix hrtimer/tasklet termination in bcm op removal	2017-01-30 11:05:04 +01:00
ceph	libceph: make sure ceph_aes_crypt() IV is aligned	2017-01-18 17:58:45 +01:00
core	lwtunnel: Fix oops on state free after encap module unload	2017-01-24 16:21:36 -05:00
dcb
dccp	tcp: don't annotate mark on control socket from tcp_v6_send_response()	2017-01-27 10:33:56 -05:00
decnet	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
dns_resolver
dsa	net: dsa: Bring back device detaching in dsa_slave_suspend()	2017-01-25 14:47:44 -05:00
ethernet
hsr
ieee802154	Makefile: drop -D__CHECK_ENDIAN__ from cflags	2016-12-16 00:13:43 +02:00
ipv4	tcp: fix 0 divide in __tcp_select_window()	2017-02-01 12:55:42 -05:00
ipv6	ipv6: pointer math error in ip6_tnl_parse_tlv_enc_lim()	2017-02-01 12:27:33 -05:00
ipx	ktime: Get rid of the union	2016-12-25 17:21:22 +01:00
irda	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
iucv	net/af_iucv: don't use paged skbs for TX on HiperSockets	2017-01-10 21:08:29 -05:00
kcm
key
l2tp	l2tp: take remote address into account in l2tp_ip and l2tp_ip6 socket lookups	2017-01-01 22:07:20 -05:00
l3mdev
lapb	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
llc
mac80211	mac80211: don't try to sleep in rate_control_rate_init()	2017-01-24 16:31:54 +01:00
mac802154	ktime: Cleanup ktime_set() usage	2016-12-25 17:21:22 +01:00
mpls	net: Specify the owning module for lwtunnel ops	2017-01-24 16:21:36 -05:00
ncsi
netfilter	netfilter: ctnetlink: Fix regression in CTA_STATUS processing	2017-02-06 12:48:26 +01:00
netlabel	netlabel: add CALIPSO to the list of built-in protocols	2017-01-06 22:20:45 -05:00
netlink	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
netrom
nfc
openvswitch	openvswitch: maintain correct checksum state in conntrack actions	2017-01-15 22:15:16 -05:00
packet	virtio-net: restore VIRTIO_HDR_F_DATA_VALID on receiving	2017-01-20 11:01:17 -05:00
phonet
qrtr	net: qrtr: Mark 'buf' as little endian	2017-01-10 20:45:04 -05:00
rds	RDS: use rb_entry()	2016-12-20 14:22:49 -05:00
rfkill
rose	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
rxrpc	rxrpc: abstract away knowledge of IDR internals	2016-12-14 16:04:10 -08:00
sched	net/sched: matchall: Fix configuration race	2017-02-01 11:57:33 -05:00
sctp	tcp: don't annotate mark on control socket from tcp_v6_send_response()	2017-01-27 10:33:56 -05:00
strparser
sunrpc	SUNRPC: cleanup ida information when removing sunrpc module	2017-01-24 15:29:24 -05:00
switchdev
tipc	tipc: fix cleanup at module unload	2017-01-24 16:14:58 -05:00
unix	af_unix: move unix_mknod() out of bindlock	2017-01-24 14:30:56 -05:00
vmw_vsock	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-12-17 20:17:04 -08:00
wimax
wireless	cfg80211: consider VHT opmode on station update	2017-01-11 16:34:25 +01:00
x25	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
xfrm	ktime: Cleanup ktime_set() usage	2016-12-25 17:21:22 +01:00
compat.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
Kconfig	cgroup: move CONFIG_SOCK_CGROUP_DATA to init/Kconfig	2017-01-11 09:47:10 -05:00
Makefile
socket.c	net: socket: Make unnecessarily global sockfs_setattr() static	2017-01-10 11:29:50 -05:00
sysctl_net.c