Martin Willi 025c65e119 xfrm: Honor original L3 slave device in xfrmi policy lookup ...

If an xfrmi is associated to a vrf layer 3 master device,
xfrm_policy_check() fails after traffic decapsulation. The input
interface is replaced by the layer 3 master device, and hence
xfrmi_decode_session() can't match the xfrmi anymore to satisfy
policy checking.

Extend ingress xfrmi lookup to honor the original layer 3 slave
device, allowing xfrm interfaces to operate within a vrf domain.

Fixes: f203b76d7809 ("xfrm: Add virtual xfrm interfaces")
Signed-off-by: Martin Willi <martin@strongswan.org>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>

2019-03-27 16:14:05 +01:00

..

Kconfig

xfrm: prefer secpath_set over secpath_dup

2018-12-19 11:21:38 -08:00

Makefile

xfrm: Add virtual xfrm interfaces

2018-06-23 16:07:25 +02:00

xfrm_algo.c

xfrm: use IS_ENABLED() instead of checking for built-in or module

2016-09-10 21:19:11 -07:00

xfrm_device.c

net: use skb_sec_path helper in more places

2018-12-19 11:21:37 -08:00

xfrm_hash.c

mm: remove include/linux/bootmem.h

2018-10-31 08:54:16 -07:00

xfrm_hash.h

xfrm: use complete IPv6 addresses for hash

2018-10-15 10:09:18 +02:00

xfrm_input.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2018-12-20 11:53:36 -08:00

xfrm_interface.c

xfrm: Honor original L3 slave device in xfrmi policy lookup

2019-03-27 16:14:05 +01:00

xfrm_ipcomp.c

net: xfrm: use preempt-safe this_cpu_read() in ipcomp_alloc_tfms()

2018-03-13 07:46:37 +01:00

xfrm_output.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2018-12-20 11:53:36 -08:00

xfrm_policy.c

xfrm: Honor original L3 slave device in xfrmi policy lookup

2019-03-27 16:14:05 +01:00

xfrm_proc.c

proc: introduce proc_create_net_single

2018-05-16 07:24:30 +02:00

xfrm_replay.c

xfrm: Fix ESN sequence number handling for IPsec GSO packets.

2018-03-01 08:14:50 +01:00

xfrm_state.c

xfrm: clean up xfrm protocol checks

2019-03-26 08:35:36 +01:00

xfrm_sysctl.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

xfrm_user.c

xfrm: clean up xfrm protocol checks

2019-03-26 08:35:36 +01:00