> v2: Don't allow non-init_net ns to alter this global sysctl Looks good. > include/net/netfilter/nf_conntrack.h | 1 + > net/netfilter/nf_conntrack_core.c | 4 +++- > net/netfilter/nf_conntrack_standalone.c | 9 +++++++++ > 3 files changed, 13 insertions(+), 1 deletion(-) Sorry, I forgot about Documentation/networking/nf_conntrack-sysctl.rst Can you add a short description to that file? I don't think anything else is missing after this. Thanks.