netfilter: nft_dynset: allow dynamic updates of non-anonymous set

This check is superfluous since it breaks valid configurations, remove it.

Signed-off-by: Pablo Neira Ayuso <[email protected]>

diff --git a/net/netfilter/nft_dynset.c b/net/netfilter/nft_dynset.c
index 81184c244d1a941c659382348b121e7f6e495687..6e91a37d57f2736a128cefe886422a15d1cee851 100644 (file)
--- a/net/netfilter/nft_dynset.c
+++ b/net/netfilter/nft_dynset.c
@@ -187,8 +187,6 @@ static int nft_dynset_init(const struct nft_ctx *ctx,
        if (tb[NFTA_DYNSET_EXPR] != NULL) {
                if (!(set->flags & NFT_SET_EVAL))
                        return -EINVAL;
        if (tb[NFTA_DYNSET_EXPR] != NULL) {
                if (!(set->flags & NFT_SET_EVAL))
                        return -EINVAL;

-               if (!nft_set_is_anonymous(set))
-                       return -EOPNOTSUPP;

 
                priv->expr = nft_expr_init(ctx, tb[NFTA_DYNSET_EXPR]);
                if (IS_ERR(priv->expr))
 
                priv->expr = nft_expr_init(ctx, tb[NFTA_DYNSET_EXPR]);
                if (IS_ERR(priv->expr))