netfilter: nft_dynset: allow dynamic updates of non-anonymous set



This check is superfluous since it breaks valid configurations, remove it.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

parent 90d827f0

net/netfilter/nft_dynset.c

+0 −2

Original line number	Diff line number	Diff line
		@@ -187,8 +187,6 @@ static int nft_dynset_init(const struct nft_ctx *ctx,
		if (tb[NFTA_DYNSET_EXPR] != NULL) {
		if (!(set->flags & NFT_SET_EVAL))
		return -EINVAL;
		if (!nft_set_is_anonymous(set))
		return -EOPNOTSUPP;

		priv->expr = nft_expr_init(ctx, tb[NFTA_DYNSET_EXPR]);
		if (IS_ERR(priv->expr))