Skip to content

Commit f60201c

Browse files
committed
netfilter: nf_tables: allow to fetch set elements when table has an owner
Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=2189550 Upstream Status: commit 92f3e96 commit 92f3e96 Author: Pablo Neira Ayuso <pablo@netfilter.org> Date: Wed Feb 8 11:34:27 2023 +0100 netfilter: nf_tables: allow to fetch set elements when table has an owner NFT_MSG_GETSETELEM returns -EPERM when fetching set elements that belong to table that has an owner. This results in empty set/map listing from userspace. Fixes: 6001a93 ("netfilter: nftables: introduce table ownership") Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> Signed-off-by: Florian Westphal <fwestpha@redhat.com>
1 parent aebf798 commit f60201c

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

net/netfilter/nf_tables_api.c

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5368,7 +5368,7 @@ static int nf_tables_getsetelem(struct sk_buff *skb,
53685368
int rem, err = 0;
53695369

53705370
table = nft_table_lookup(net, nla[NFTA_SET_ELEM_LIST_TABLE], family,
5371-
genmask, NETLINK_CB(skb).portid);
5371+
genmask, 0);
53725372
if (IS_ERR(table)) {
53735373
NL_SET_BAD_ATTR(extack, nla[NFTA_SET_ELEM_LIST_TABLE]);
53745374
return PTR_ERR(table);

0 commit comments

Comments
 (0)