diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2024-11-26 11:59:06 +0100 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2024-11-28 13:14:24 +0100 |
| commit | b7529880cb961d515642ce63f9d7570869bbbdc3 (patch) | |
| tree | 79d05805b4b59b67834ece69c84b366db989814d /include | |
| parent | 04317f4eb2aad312ad85c1a17ad81fe75f1f9bc7 (diff) | |
| download | linux-b7529880cb961d515642ce63f9d7570869bbbdc3.tar.gz linux-b7529880cb961d515642ce63f9d7570869bbbdc3.tar.bz2 linux-b7529880cb961d515642ce63f9d7570869bbbdc3.zip | |
netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level
cgroup maximum depth is INT_MAX by default, there is a cgroup toggle to
restrict this maximum depth to a more reasonable value not to harm
performance. Remove unnecessary WARN_ON_ONCE which is reachable from
userspace.
Fixes: 7f3287db6543 ("netfilter: nft_socket: make cgroupsv2 matching work with namespaces")
Reported-by: syzbot+57bac0866ddd99fe47c0@syzkaller.appspotmail.com
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'include')
0 files changed, 0 insertions, 0 deletions