From: Pablo Neira Ayuso <pa...@netfilter.org>
Date: Thu, 20 Oct 2016 20:22:24 +0200
> On Sat, Sep 24, 2016 at 12:21:04AM +0200, Jann Horn wrote:
>> This prevents the modification of nf_conntrack_max in unprivileged network
>> namespaces. For unprivileged network namespaces, ip_conntrack_max is kept
>> as a readonly sysctl in order to minimize potential compatibility issues.
>>
>> This patch should apply cleanly to the net tree.
>
> For the record: This patch looks good to me, but this legacy
> ip_conntrack sysctl code is now gone.
>
> I don't know what is the procedure to get this to -stable branches now
> that this cannot be pushed upstream.
In the commit message for the -stable submission simply say "Not
applicable" in the upstream commit reference. Like:
[ Upstream commit: Not applicable ]
or something like that.
