Pablo Neira Ayuso b118509076 netfilter: remove nf_conntrack_helper sysctl and modparam toggles ... __nf_ct_try_assign_helper() remains in place but it now requires a template to configure the helper. A toggle to disable automatic helper assignment was added by: a900689264 ("netfilter: nf_ct_helper: allow to disable automatic helper assignment") in 2012 to address the issues described in "Secure use of iptables and connection tracking helpers". Automatic conntrack helper assignment was disabled by: 3bb398d925 ("netfilter: nf_ct_helper: disable automatic helper assignment") back in 2016. This patch removes the sysctl and modparam toggles, users now have to rely on explicit conntrack helper configuration via ruleset. Update tools/testing/selftests/netfilter/nft_conntrack_helper.sh to check that auto-assignment does not happen anymore. Acked-by: Aaron Conole <aconole@redhat.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2022-08-31 12:12:32 +02:00
..
ipv4	…
ipv6	…
br_netfilter.h	…
nf_conntrack.h	netfilter: remove nf_conntrack_helper sysctl and modparam toggles	2022-08-31 12:12:32 +02:00
nf_conntrack_acct.h	…
nf_conntrack_act_ct.h	…
nf_conntrack_bpf.h	…
nf_conntrack_bridge.h	…
nf_conntrack_core.h	net: netfilter: Add kfuncs to set and change CT status	2022-07-21 21:03:16 -07:00
nf_conntrack_count.h	netfilter: nf_conncount: reduce unnecessary GC	2022-05-16 13:05:40 +02:00
nf_conntrack_ecache.h	netfilter: prefer extension check to pointer check	2022-05-13 18:56:28 +02:00
nf_conntrack_expect.h	…
nf_conntrack_extend.h	netfilter: extensions: introduce extension genid count	2022-05-13 18:52:16 +02:00
nf_conntrack_helper.h	…
nf_conntrack_l4proto.h	…
nf_conntrack_labels.h	netfilter: extensions: introduce extension genid count	2022-05-13 18:52:16 +02:00
nf_conntrack_seqadj.h	…
nf_conntrack_synproxy.h	…
nf_conntrack_timeout.h	netfilter: nf_conntrack: add missing __rcu annotations	2022-07-11 16:25:15 +02:00
nf_conntrack_timestamp.h	…
nf_conntrack_tuple.h	…
nf_conntrack_zones.h	…
nf_dup_netdev.h	…
nf_flow_table.h	netfilter: flowtable: fix stuck flows on cleanup due to pending work	2022-08-24 07:43:21 +02:00
nf_hooks_lwtunnel.h	…
nf_log.h	…
nf_nat.h	netfilter: nf_nat: in nf_nat_initialized(), use const struct nf_conn *	2022-07-14 00:24:06 +02:00
nf_nat_helper.h	…
nf_nat_masquerade.h	…
nf_nat_redirect.h	…
nf_queue.h	…
nf_reject.h	netfilter: conntrack: skip verification of zero UDP checksum	2022-05-13 18:56:28 +02:00
nf_socket.h	…
nf_synproxy.h	…
nf_tables.h	netfilter: nf_tables: make table handle allocation per-netns friendly	2022-08-24 07:43:20 +02:00
nf_tables_core.h	netfilter: nf_tables: move nft_cmp_fast_mask to where its used	2022-07-11 16:40:46 +02:00
nf_tables_ipv4.h	…
nf_tables_ipv6.h	…
nf_tables_offload.h	netfilter: nf_tables: bail out early if hardware offload is not supported	2022-06-06 19:19:15 +02:00
nf_tproxy.h	…
nft_fib.h	…
nft_meta.h	…
nft_reject.h	…
xt_rateest.h	…