netdev - xfrm_lookup() and XFRM_POLICY

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date:	Thu, 31 Jan 2008 10:42:08 +0200
From:	"Andy Johnson" <johnsonzjo@...il.com>
To:	netdev@...r.kernel.org
Subject: xfrm_lookup() and XFRM_POLICY_ICMP

Hello,

A question about XFRM_POLICY_ICMP:

 I had tried to understand this check in __xfrm_lookup() method in
  net/xfrm/xfrm_policy.c (the recent 2.6 git dave miller tree):
...
...
		if ((flags & XFRM_LOOKUP_ICMP) && !(policy->flags & XFRM_POLICY_ICMP))
		goto error;
...
...

Why is the check for XFRM_POLICY_ICMP? I had grepped under the kernel tree,
and the only place where XFRM_POLICY_ICMP appears is here (except its definition
in xfrm.h).

I also grepped under openswan tree, and could not find XFRM_POLICY_ICMP.
(the struct xfrm_userpolicy_info  in openswan includes XFRM_POLICY_ALLOW and
XFRM_POLICY_BLOCK and XFRM_POLICY_LOCALOK, but not XFRM_POLICY_ICMP).

I also grepped under iproute2 tree (from git) and there is no XFRM_POLICY_ICMP.

So is this there a way at all to set XFRM_POLICY_ICMP? and if not - maybe this
check is not needed at all ?

Regards,
Andy
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html