| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <504DF77B.7070000@gmail.com> Date: Mon, 10 Sep 2012 10:21:47 -0400 From: Vlad Yasevich <vyasevich@...il.com> To: Nicolas Dichtel <nicolas.dichtel@...nd.com> CC: davem@...emloft.net, eric.dumazet@...il.com, sri@...ibm.com, linux-sctp@...r.kernel.org, netdev@...r.kernel.org Subject: Re: [PATCH net-next v2 2/4] xfrm: invalidate dst on policy insertion/deletion On 09/10/2012 09:22 AM, Nicolas Dichtel wrote: > When a policy is inserted or deleted, all dst should be recalculated. > > Signed-off-by: Nicolas Dichtel <nicolas.dichtel@...nd.com> > --- > net/xfrm/xfrm_policy.c | 1 + > 1 file changed, 1 insertion(+) > > diff --git a/net/xfrm/xfrm_policy.c b/net/xfrm/xfrm_policy.c > index 741a32a..67f456d 100644 > --- a/net/xfrm/xfrm_policy.c > +++ b/net/xfrm/xfrm_policy.c > @@ -602,6 +602,7 @@ int xfrm_policy_insert(int dir, struct xfrm_policy *policy, int excl) > xfrm_pol_hold(policy); > net->xfrm.policy_count[dir]++; > atomic_inc(&flow_cache_genid); > + rt_genid_bump(net); > if (delpol) > __xfrm_policy_unlink(delpol, dir); > policy->index = delpol ? delpol->index : xfrm_gen_index(net, dir); > What about security_load_policy() and security_set_bools(). They also bumps the flow_cache_genid by way of selinux_xfrm_notify_policyload(). -vlad -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists