raspi/linux
1
0
Fork 1
mirror of https://github.com/raspberrypi/linux.git synced 2025-12-07 02:19:54 +00:00
Code Issues Projects Releases Wiki Activity
Files
2b18febc8cdce901b26a7bad80f6c83322c517f0
linux/net/xfrm
History
Martin Willi 6faa620606 xfrm: Honor original L3 slave device in xfrmi policy lookup 
[ Upstream commit 025c65e119 ]

If an xfrmi is associated to a vrf layer 3 master device,
xfrm_policy_check() fails after traffic decapsulation. The input
interface is replaced by the layer 3 master device, and hence
xfrmi_decode_session() can't match the xfrmi anymore to satisfy
policy checking.

Extend ingress xfrmi lookup to honor the original layer 3 slave
device, allowing xfrm interfaces to operate within a vrf domain.

Fixes: f203b76d78 ("xfrm: Add virtual xfrm interfaces")
Signed-off-by: Martin Willi <martin@strongswan.org>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2019-05-25 18:23:41 +02:00
..
Kconfig
Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next
2018-07-27 09:33:37 -07:00
Makefile
xfrm: Add virtual xfrm interfaces
2018-06-23 16:07:25 +02:00
xfrm_algo.c
xfrm: use IS_ENABLED() instead of checking for built-in or module
2016-09-10 21:19:11 -07:00
xfrm_device.c
xfrm: don't check offload_handle for nonzero
2018-07-19 10:18:04 +02:00
xfrm_hash.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
xfrm_hash.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
xfrm_input.c
xfrm: Fix NULL pointer dereference in xfrm_input when skb_dst_force clears the dst_entry.
2019-01-13 09:50:57 +01:00
xfrm_interface.c
xfrm: Honor original L3 slave device in xfrmi policy lookup
2019-05-25 18:23:41 +02:00
xfrm_ipcomp.c
net: xfrm: use preempt-safe this_cpu_read() in ipcomp_alloc_tfms()
2018-03-13 07:46:37 +01:00
xfrm_output.c
xfrm: Fix error return code in xfrm_output_one()
2019-01-13 09:50:57 +01:00
xfrm_policy.c
xfrm: Honor original L3 slave device in xfrmi policy lookup
2019-05-25 18:23:41 +02:00
xfrm_proc.c
proc: introduce proc_create_net_single
2018-05-16 07:24:30 +02:00
xfrm_replay.c
xfrm: Fix ESN sequence number handling for IPsec GSO packets.
2018-03-01 08:14:50 +01:00
xfrm_state.c
xfrm: clean up xfrm protocol checks
2019-05-25 18:23:41 +02:00
xfrm_sysctl.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
xfrm_user.c
xfrm: clean up xfrm protocol checks
2019-05-25 18:23:41 +02:00