tree ed7f06c1e49031b7ca864f61768a810a0092987d
parent 7249a00163f8c50f4b43a566a15b81ca0de1db6c
author Pablo Neira Ayuso <pablo@netfilter.org> 1686921616 +0200
committer Greg Kroah-Hartman <gregkh@linuxfoundation.org> 1687940060 +0200

netfilter: nf_tables: disallow element updates of bound anonymous sets

[ Upstream commit c88c535b592d3baeee74009f3eceeeaf0fdd5e1b ]

Anonymous sets come with NFT_SET_CONSTANT from userspace. Although API
allows to create anonymous sets without NFT_SET_CONSTANT, it makes no
sense to allow to add and to delete elements for bound anonymous sets.

Fixes: 96518518cc41 ("netfilter: add nftables")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>