netfilter: xt_cluster: add dependency on conntrack module
authorMartin Willi <martin@strongswan.org>
Wed, 22 Aug 2018 08:27:17 +0000 (10:27 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 10 Oct 2018 06:54:23 +0000 (08:54 +0200)
commitb969656b46626a674232c0eadf92a394b89df07c
tree78014150d5f0d2cc70d4da1bed0748de89569a0e
parent10fdfea70d4667abf3724c31443e5d5922fecebd
netfilter: xt_cluster: add dependency on conntrack module

[ Upstream commit c1dc2912059901f97345d9e10c96b841215fdc0f ]

The cluster match requires conntrack for matching packets. If the
netns does not have conntrack hooks registered, the match does not
work at all.

Implicitly load the conntrack hook for the family, exactly as many
other extensions do. This ensures that the match works even if the
hooks have not been registered by other means.

Signed-off-by: Martin Willi <martin@strongswan.org>
Acked-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <alexander.levin@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/netfilter/xt_cluster.c