netfilter: nf_tables: allow to fetch set elements when table has an owner
authorPablo Neira Ayuso <pablo@netfilter.org>
Wed, 8 Feb 2023 10:34:27 +0000 (11:34 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 11 Mar 2023 12:55:22 +0000 (13:55 +0100)
commit44b713a242510cfb3aeed4fc96e8d680065152a9
treeccb0180984ca024377b5c823013acf9be4210bfc
parent13a6366bbfa2c07694daf14c47fa50c978c25119
netfilter: nf_tables: allow to fetch set elements when table has an owner

[ Upstream commit 92f3e96d642f5e05b9dc710c06fedc669f1b4f00 ]

NFT_MSG_GETSETELEM returns -EPERM when fetching set elements that belong
to table that has an owner. This results in empty set/map listing from
userspace.

Fixes: 6001a930ce03 ("netfilter: nftables: introduce table ownership")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/netfilter/nf_tables_api.c