target/linux/generic/backport-4.14/340-v4.16-netfilter-nft_flow_offload-no-need-to-flush-entries-.patch

   1 From: Pablo Neira Ayuso <pablo@netfilter.org>
   2 Date: Thu, 1 Feb 2018 18:49:01 +0100
   3 Subject: [PATCH] netfilter: nft_flow_offload: no need to flush entries on
   4  module removal
   5
   6 nft_flow_offload module removal does not require to flush existing
   7 flowtables, it is valid to remove this module while keeping flowtables
   8 around.
   9
  10 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
  11 ---
  12
  13 --- a/net/netfilter/nft_flow_offload.c
  14 +++ b/net/netfilter/nft_flow_offload.c
  15 @@ -247,14 +247,8 @@ register_expr:
  16
  17  static void __exit nft_flow_offload_module_exit(void)
  18  {
  19 -       struct net *net;
  20 -
  21         nft_unregister_expr(&nft_flow_offload_type);
  22         unregister_netdevice_notifier(&flow_offload_netdev_notifier);
  23 -       rtnl_lock();
  24 -       for_each_net(net)
  25 -               nft_flow_table_iterate(net, nft_flow_offload_iterate_cleanup, NULL);
  26 -       rtnl_unlock();
  27  }
  28
  29  module_init(nft_flow_offload_module_init);