On Tue, Sep 29, 2015 at 11:25:08AM +0200, Michael Rossberg wrote:

Allow to change the replay threshold (XFRMA_REPLAY_THRESH) and expiry
timer (XFRMA_ETIMER_THRESH) of a state without having to set other
attributes like replay counter and byte lifetime. Changing these other
values while traffic flows will break the state.

Signed-off-by: Michael Rossberg <redacted>

Applied to the ipsec tree, thanks Michael!