linux-kernel - Re: [Regression?] fib_rules: Added NLM_F_EXCL support to fib_nl

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAKD1Yr06yV+P7_WwaF+CXuzD9xHEHQYereL-1Ax0_8hLDTSMOQ@mail.gmail.com>
Date:	Mon, 1 Aug 2016 10:42:05 +0900
From:	Lorenzo Colitti <lorenzo@...gle.com>
To:	John Stultz <john.stultz@...aro.org>
Cc:	David Ahern <dsa@...ulusnetworks.com>,
	David Miller <davem@...emloft.net>,
	Mateusz Bajorski <mateusz.bajorski@...ia.com>,
	lkml <linux-kernel@...r.kernel.org>,
	Guodong Xu <guodong.xu@...aro.org>,
	Dmitry Shmidt <dimitrysh@...gle.com>,
	Chih-Hung Hsieh <chh@...gle.com>,
	Eric Caruso <ejcaruso@...gle.com>
Subject: Re: [Regression?] fib_rules: Added NLM_F_EXCL support to
 fib_nl_newrule breaks Android userspace

On Sat, Jul 30, 2016 at 1:57 AM, John Stultz <john.stultz@...aro.org> wrote:
>
> With the patch reverted, and the system working,  I see:
>
> # ip rule ls
> 0:      from all lookup local
> 10000:  from all fwmark 0xc0000/0xd0000 lookup legacy_system
> 13000:  from all fwmark 0x10063/0x1ffff lookup local_network
> 13000:  from all fwmark 0x10065/0x1ffff lookup wlan0
> 14000:  from all oif wlan0 lookup wlan0
> 14000:  from all oif wlan0 lookup wlan0
> 15000:  from all fwmark 0x0/0x10000 lookup legacy_system
> 16000:  from all fwmark 0x0/0x10000 lookup legacy_network
> 17000:  from all fwmark 0x0/0x10000 lookup local_network
> 19000:  from all fwmark 0x64/0x1ffff lookup wlan0
> 19000:  from all fwmark 0x65/0x1ffff lookup wlan0
> 22000:  from all fwmark 0x0/0xffff lookup wlan0
> 32000:  from all unreachable


This is not correct, you're missing "uidrange 0-0" qualifiers on some
of the rules.

Does the kernel pass the networking unit tests at
https://source.android.com/devices/tech/config/kernel_network_tests.html
? If not, the Android network stack will not work correctly.