提交 · 29fa0b301bc823016d1a3bed41c36a8977ef9947 · openeuler / Kernel

03 12月, 2008 2 次提交

xfrm: Cleanup for unlink SPD entry · 29fa0b30

由 Wei Yongjun 提交于 12月 03, 2008

Used __xfrm_policy_unlink() to instead of the dup codes when unlink
SPD entry.
Signed-off-by: NWei Yongjun <yjwei@cn.fujitsu.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

29fa0b30

xfrm: Fix kernel panic when flush and dump SPD entries · d5654efd

由 Wei Yongjun 提交于 12月 03, 2008

After flush the SPD entries, dump the SPD entries will cause kernel painc.

Used the following commands to reproduct:

- echo 'spdflush;' | setkey -c
- echo 'spdadd 3ffe:501:ffff:ff01::/64 3ffe:501:ffff:ff04::/64  any -P out ipsec \
  ah/tunnel/3ffe:501:ffff:ff00:200:ff:fe00:b0b0-3ffe:501:ffff:ff02:200:ff:fe00:a1a1/require;\
  spddump;' | setkey -c
- echo 'spdflush; spddump;' | setkey -c
- echo 'spdadd 3ffe:501:ffff:ff01::/64 3ffe:501:ffff:ff04::/64  any -P out ipsec \
  ah/tunnel/3ffe:501:ffff:ff00:200:ff:fe00:b0b0-3ffe:501:ffff:ff02:200:ff:fe00:a1a1/require;\
  spddump;' | setkey -c

This is because when flush the SPD entries, the SPD entry is not remove
from the list.

This patch fix the problem by remove the SPD entry from the list.
Signed-off-by: NWei Yongjun <yjwei@cn.fujitsu.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

d5654efd

26 11月, 2008 38 次提交

netns xfrm: per-netns sysctls · b27aeadb

由 Alexey Dobriyan 提交于 11月 25, 2008

Make
	net.core.xfrm_aevent_etime
	net.core.xfrm_acq_expires
	net.core.xfrm_aevent_rseqth
	net.core.xfrm_larval_drop

sysctls per-netns.

For that make net_core_path[] global, register it to prevent two
/proc/net/core antries and change initcall position -- xfrm_init() is called
from fs_initcall, so this one should be fs_initcall at least.
Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

b27aeadb

netns xfrm: /proc/net/xfrm_stat in netns · c68cd1a0

由 Alexey Dobriyan 提交于 11月 25, 2008

Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

c68cd1a0

netns xfrm: per-netns MIBs · 59c9940e

由 Alexey Dobriyan 提交于 11月 25, 2008

Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

59c9940e

netns xfrm: flush SA/SPDs on netns stop · 7c2776ee

由 Alexey Dobriyan 提交于 11月 25, 2008

SA/SPD doesn't pin netns (and it shouldn't), so get rid of them by hand.
Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

7c2776ee

netns xfrm: ->get_saddr in netns · fbda33b2

由 Alexey Dobriyan 提交于 11月 25, 2008

Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

fbda33b2

netns xfrm: ->dst_lookup in netns · c5b3cf46

由 Alexey Dobriyan 提交于 11月 25, 2008

Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

c5b3cf46

netns xfrm: KM reporting in netns · db983c11

由 Alexey Dobriyan 提交于 11月 25, 2008

Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

db983c11

netns xfrm: pass netns with KM notifications · 7067802e

由 Alexey Dobriyan 提交于 11月 25, 2008

SA and SPD flush are executed with NULL SA and SPD respectively, for
these cases pass netns explicitly from userspace socket.
Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

7067802e

netns xfrm: xfrm_user module in netns · fc34acd3

由 Alexey Dobriyan 提交于 11月 25, 2008

Grab netns either from netlink socket, state or policy.

SA and SPD flush are in init_net for now, this requires little
attention, see below.
Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

fc34acd3

netns xfrm: per-netns NETLINK_XFRM socket · a6483b79

由 Alexey Dobriyan 提交于 11月 25, 2008

Stub senders to init_net's one temporarily.
Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

a6483b79

netns xfrm: xfrm_input() fixup · bd235e3c

由 Alexey Dobriyan 提交于 11月 25, 2008

Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

bd235e3c

netns xfrm: dst garbage-collecting in netns · ddcfd796

由 Alexey Dobriyan 提交于 11月 25, 2008

Pass netns pointer to struct xfrm_policy_afinfo::garbage_collect()

	[This needs more thoughts on what to do with dst_ops]
	[Currently stub to init_net]
Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

ddcfd796

netns xfrm: flushing/pruning bundles in netns · 3dd0b499

由 Alexey Dobriyan 提交于 11月 25, 2008

Allow netdevice notifier as result.
Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

3dd0b499

netns xfrm: xfrm_route_forward() in netns · 99a66657

由 Alexey Dobriyan 提交于 11月 25, 2008

Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

99a66657

netns xfrm: xfrm_policy_check in netns · f6e1e25d

由 Alexey Dobriyan 提交于 11月 25, 2008

Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

f6e1e25d

netns xfrm: lookup in netns · 52479b62

由 Alexey Dobriyan 提交于 11月 25, 2008

Pass netns to xfrm_lookup()/__xfrm_lookup(). For that pass netns
to flow_cache_lookup() and resolver callback.

Take it from socket or netdevice. Stub DECnet to init_net.
Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

52479b62

netns xfrm: policy walking in netns · cdcbca7c

由 Alexey Dobriyan 提交于 11月 25, 2008

Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

cdcbca7c

netns xfrm: finding policy in netns · 8d1211a6

由 Alexey Dobriyan 提交于 11月 25, 2008

Add netns parameter to xfrm_policy_bysel_ctx(), xfrm_policy_byidx().
Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

8d1211a6

netns xfrm: policy flushing in netns · 33ffbbd5

由 Alexey Dobriyan 提交于 11月 25, 2008

Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

33ffbbd5

netns xfrm: policy insertion in netns · 1121994c

由 Alexey Dobriyan 提交于 11月 25, 2008

Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

1121994c

netns xfrm: propagate netns into policy byidx hash · e92303f8

由 Alexey Dobriyan 提交于 11月 25, 2008

Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

e92303f8

netns xfrm: state walking in netns · 284fa7da

由 Alexey Dobriyan 提交于 11月 25, 2008

Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

284fa7da

netns xfrm: finding states in netns · 5447c5e4

由 Alexey Dobriyan 提交于 11月 25, 2008

Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

5447c5e4

netns xfrm: fixup xfrm_alloc_spi() · 12604d8a

由 Alexey Dobriyan 提交于 11月 25, 2008

Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

12604d8a

netns xfrm: state lookup in netns · 221df1ed

由 Alexey Dobriyan 提交于 11月 25, 2008

Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

221df1ed

netns xfrm: state flush in netns · 0e602451

由 Alexey Dobriyan 提交于 11月 25, 2008

Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

0e602451

netns xfrm: trivial netns propagations · 98806f75

由 Alexey Dobriyan 提交于 11月 25, 2008

Take netns from xfrm_state or xfrm_policy.
Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

98806f75

A
netns xfrm: propagate netns into bydst/bysrc/byspi hash functions · 64d0cd00
由 Alexey Dobriyan 提交于 11月 25, 2008
```
Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>
```
64d0cd00

netns xfrm: per-netns policy hash resizing work · 66caf628

由 Alexey Dobriyan 提交于 11月 25, 2008

Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

66caf628

netns xfrm: per-netns policy counts · dc2caba7

由 Alexey Dobriyan 提交于 11月 25, 2008

Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

dc2caba7

netns xfrm: per-netns xfrm_policy_bydst hash · a35f6c5d

由 Alexey Dobriyan 提交于 11月 25, 2008

Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

a35f6c5d

netns xfrm: per-netns inexact policies · 8b18f8ea

由 Alexey Dobriyan 提交于 11月 25, 2008

Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

8b18f8ea

netns xfrm: per-netns xfrm_policy_byidx hashmask · 8100bea7

由 Alexey Dobriyan 提交于 11月 25, 2008

Per-netns hashes are independently resizeable.
Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

8100bea7

netns xfrm: per-netns xfrm_policy_byidx hash · 93b851c1

由 Alexey Dobriyan 提交于 11月 25, 2008

Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

93b851c1

netns xfrm: per-netns policy list · adfcf0b2

由 Alexey Dobriyan 提交于 11月 25, 2008

Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

adfcf0b2

netns xfrm: add struct xfrm_policy::xp_net · 0331b1f3

由 Alexey Dobriyan 提交于 11月 25, 2008

Again, to avoid complications with passing netns when not necessary.
Again, ->xp_net is set-once field, once set it never changes.
Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

0331b1f3

netns xfrm: per-netns km_waitq · 50a30657

由 Alexey Dobriyan 提交于 11月 25, 2008

Disallow spurious wakeups in __xfrm_lookup().
Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

50a30657

netns xfrm: per-netns state GC work · c7837144

由 Alexey Dobriyan 提交于 11月 25, 2008

State GC is per-netns, and this is part of it.
Signed-off-by: NAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>

c7837144

openeuler / Kernel 接近 2 年 前同步成功

openeuler / Kernel
接近 2 年前同步成功