From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> Date: Thu, 20 Oct 2016 20:22:24 +0200 > On Sat, Sep 24, 2016 at 12:21:04AM +0200, Jann Horn wrote: >> This prevents the modification of nf_conntrack_max in unprivileged network >> namespaces. For unprivileged network namespaces, ip_conntrack_max is kept >> as a readonly sysctl in order to minimize potential compatibility issues. >> >> This patch should apply cleanly to the net tree. > > For the record: This patch looks good to me, but this legacy > ip_conntrack sysctl code is now gone. > > I don't know what is the procedure to get this to -stable branches now > that this cannot be pushed upstream. In the commit message for the -stable submission simply say "Not applicable" in the upstream commit reference. Like: [ Upstream commit: Not applicable ] or something like that. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
