summaryrefslogtreecommitdiffstats
path: root/net
diff options
context:
space:
mode:
authorDaniel Borkmann <dborkman@redhat.com>2014-08-18 15:46:28 +0200
committerPablo Neira Ayuso <pablo@netfilter.org>2014-08-19 21:38:55 +0200
commitcaa8ad94edf686d02b555c65a6162c0d1b434958 (patch)
tree848285c5619d4d1b1c14d8c15428c514ed25d5af /net
parentnetfilter: move NAT Kconfig switches out of the iptables scope (diff)
downloadlinux-caa8ad94edf686d02b555c65a6162c0d1b434958.tar.xz
linux-caa8ad94edf686d02b555c65a6162c0d1b434958.zip
netfilter: x_tables: allow to use default cgroup match
There's actually no good reason why we cannot use cgroup id 0, so lets just remove this artificial barrier. Reported-by: Alexey Perevalov <a.perevalov@samsung.com> Signed-off-by: Daniel Borkmann <dborkman@redhat.com> Tested-by: Alexey Perevalov <a.perevalov@samsung.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net')
-rw-r--r--net/netfilter/xt_cgroup.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/net/netfilter/xt_cgroup.c b/net/netfilter/xt_cgroup.c
index f4e833005320..7198d660b4de 100644
--- a/net/netfilter/xt_cgroup.c
+++ b/net/netfilter/xt_cgroup.c
@@ -31,7 +31,7 @@ static int cgroup_mt_check(const struct xt_mtchk_param *par)
if (info->invert & ~1)
return -EINVAL;
- return info->id ? 0 : -EINVAL;
+ return 0;
}
static bool