Tobias Brunner 660899ddf0 xfrm: Fix inbound traffic via XFRM interfaces across network namespaces ... After moving an XFRM interface to another namespace it stays associated with the original namespace (net in `struct xfrm_if` and the list keyed with `xfrmi_net_id`), allowing processes in the new namespace to use SAs/policies that were created in the original namespace. For instance, this allows a keying daemon in one namespace to establish IPsec SAs for other namespaces without processes there having access to the keys or IKE credentials. This worked fine for outbound traffic, however, for inbound traffic the lookup for the interfaces and the policies used the incorrect namespace (the one the XFRM interface was moved to). Fixes: f203b76d78 ("xfrm: Add virtual xfrm interfaces") Signed-off-by: Tobias Brunner <tobias@strongswan.org> Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>		2019-02-18 10:58:54 +01:00
..
Kconfig	xfrm: prefer secpath_set over secpath_dup	2018-12-19 11:21:38 -08:00
Makefile
xfrm_algo.c
xfrm_device.c	net: use skb_sec_path helper in more places	2018-12-19 11:21:37 -08:00
xfrm_hash.c
xfrm_hash.h
xfrm_input.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2018-12-20 11:53:36 -08:00
xfrm_interface.c	xfrm: Fix inbound traffic via XFRM interfaces across network namespaces	2019-02-18 10:58:54 +01:00
xfrm_ipcomp.c
xfrm_output.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2018-12-20 11:53:36 -08:00
xfrm_policy.c	xfrm: Fix inbound traffic via XFRM interfaces across network namespaces	2019-02-18 10:58:54 +01:00
xfrm_proc.c
xfrm_replay.c
xfrm_state.c	xfrm: destroy xfrm_state synchronously on net exit path	2019-02-05 06:29:20 +01:00
xfrm_sysctl.c
xfrm_user.c	xfrm: destroy xfrm_state synchronously on net exit path	2019-02-05 06:29:20 +01:00