conntrackd: allow to limit the number of simultaneous child processes

This patch allows to limit the number of simultaneous child processes.
This is required by the next patch that replaces disposable handlers
to commit and flush with permanent handlers.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

1 files changed, 2 insertions, 1 deletions

diff --git a/src/run.c b/src/run.c
index 21ff715..a0aea4f 100644
--- a/src/run.c
+++ b/src/run.c
@@ -218,7 +218,8 @@ void local_handler(int fd, void *data)
 
 		/* fork a child process that performs the flush operation,
 		 * meanwhile the parent process handles events. */
-		if (fork_process_new(flush_done_cb, h) == 0) {
+		if (fork_process_new(CTD_PROC_FLUSH, CTD_PROC_F_EXCL,
+				     flush_done_cb, h) == 0) {
 			nl_flush_conntrack_table(h);
 			exit(EXIT_SUCCESS);
 		}