]> www.infradead.org Git - users/jedix/linux-maple.git/commit
netfilter: ipset: List timing out entries with "timeout 1" instead of zero
authorJozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Thu, 31 May 2018 16:45:21 +0000 (18:45 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 3 Aug 2018 05:50:23 +0000 (07:50 +0200)
commitff60eda504531b7730435f1730c8bf068a209221
tree6c555e1a00670e4603d76f219cd8e18da2130b0f
parent52f072f580e4e5acfc65e40273e1cd4b544fbe63
netfilter: ipset: List timing out entries with "timeout 1" instead of zero

[ Upstream commit bd975e691486ba52790ba23cc9b4fecab7bc0d31 ]

When listing sets with timeout support, there's a probability that
just timing out entries with "0" timeout value is listed/saved.
However when restoring the saved list, the zero timeout value means
permanent elelements.

The new behaviour is that timing out entries are listed with "timeout 1"
instead of zero.

Fixes netfilter bugzilla #1258.

Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Signed-off-by: Sasha Levin <alexander.levin@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
include/linux/netfilter/ipset/ip_set_timeout.h