path: root/src/fds.c
diff options
authorPablo Neira Ayuso <>2023-10-11 11:21:40 +0200
committerPablo Neira Ayuso <>2023-10-13 00:13:21 +0200
commit58a5b32b2d5c7b6b755121930b6752e6c714f24f (patch)
treea2e7ca10112a1fadef4592aae6d439dbb6a98226 /src/fds.c
parente98bc287019d0a5625fa0d65717846bc1802f553 (diff)
conntrack: ct label update requires proper rulesetHEADmaster
As of kernel 6.6-rc, your ruleset must use either the 'connlabel' match in iptables or the 'ct label' statement in nftables to attach labels to conntrack entries. Update documentation to describe this behaviour. This patch addresses a corner case scenario: conntrack already contains entries but ruleset that specifies connlabel did not get loaded yet. In such case, skip ENOSPC errors for conntracks that have no ct label extension. Closes: Signed-off-by: Pablo Neira Ayuso <>
Diffstat (limited to 'src/fds.c')
0 files changed, 0 insertions, 0 deletions