netfilter: nf_tables: do not reduce read-only expressions

[tomoyo/tomoyo-test1.git] / net / netfilter / nft_last.c

diff --git a/net/netfilter/nft_last.c b/net/netfilter/nft_last.c
index 4f745a4..43d0d4a 100644 (file)
--- a/net/netfilter/nft_last.c
+++ b/net/netfilter/nft_last.c
@@ -120,6 +120,7 @@ static const struct nft_expr_ops nft_last_ops = {
        .destroy        = nft_last_destroy,
        .clone          = nft_last_clone,
        .dump           = nft_last_dump,
+       .reduce         = NFT_REDUCE_READONLY,
 };
 
 struct nft_expr_type nft_last_type __read_mostly = {