netdev - [PATCH 0/5] pull request (net-next): ipsec-next 2024-05-03

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20240503082732.2835810-1-steffen.klassert@secunet.com>
Date: Fri, 3 May 2024 10:27:26 +0200
From: Steffen Klassert <steffen.klassert@...unet.com>
To: David Miller <davem@...emloft.net>, Jakub Kicinski <kuba@...nel.org>
CC: Herbert Xu <herbert@...dor.apana.org.au>, Steffen Klassert
	<steffen.klassert@...unet.com>, <netdev@...r.kernel.org>
Subject: [PATCH 0/5] pull request (net-next): ipsec-next 2024-05-03

1) Remove Obsolete UDP_ENCAP_ESPINUDP_NON_IKE Support.
   This was defined by an early version of an IETF draft
   that did not make it to a standard.

2) Introduce direction attribute for xfrm states.
   xfrm states have a direction, a stsate can be used
   either for input or output packet processing.
   Add a direction to xfrm states to make it clear
   for what a xfrm state is used.

All patches from Antony Antony.

Please pull or let me know if there are problems.

Thanks!

The following changes since commit 267e31750ae89f845cfe7df8f577b19482d9ef9b:

  Merge branch 'phy-listing-link_topology-tracking' (2024-04-06 18:25:15 +0100)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git tags/ipsec-next-2024-05-03

for you to fetch changes up to dcf280ea0aad87e70ef1646d579d11f8a52f8b67:

  Merge remote branch 'xfrm: Introduce direction attribute for SA' (2024-05-02 10:05:11 +0200)

----------------------------------------------------------------
ipsec-next-2024-05-03

----------------------------------------------------------------
Antony Antony (5):
      udpencap: Remove Obsolete UDP_ENCAP_ESPINUDP_NON_IKE Support
      xfrm: Add Direction to the SA in or out
      xfrm: Add dir validation to "out" data path lookup
      xfrm: Add dir validation to "in" data path lookup
      xfrm: Restrict SA direction attribute to specific netlink message types

Steffen Klassert (1):
      Merge remote branch 'xfrm: Introduce direction attribute for SA'

 Documentation/networking/xfrm_proc.rst |   6 ++
 include/net/xfrm.h                     |   1 +
 include/uapi/linux/snmp.h              |   2 +
 include/uapi/linux/udp.h               |   2 +-
 include/uapi/linux/xfrm.h              |   6 ++
 net/ipv4/esp4.c                        |  12 ---
 net/ipv4/udp.c                         |   2 -
 net/ipv4/xfrm4_input.c                 |  13 ---
 net/ipv6/esp6.c                        |  12 ---
 net/ipv6/xfrm6_input.c                 |  20 ++--
 net/xfrm/xfrm_compat.c                 |   7 +-
 net/xfrm/xfrm_device.c                 |   6 ++
 net/xfrm/xfrm_input.c                  |  11 +++
 net/xfrm/xfrm_policy.c                 |   6 ++
 net/xfrm/xfrm_proc.c                   |   2 +
 net/xfrm/xfrm_replay.c                 |   3 +-
 net/xfrm/xfrm_state.c                  |   8 ++
 net/xfrm/xfrm_user.c                   | 162 +++++++++++++++++++++++++++++++--
 18 files changed, 219 insertions(+), 62 deletions(-)