]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
net: evaluate net.ipvX.conf.all.disable_policy and disable_xfrm
authorVincent Bernat <vincent@bernat.ch>
Sat, 7 Nov 2020 19:35:15 +0000 (20:35 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 25 May 2022 07:17:57 +0000 (09:17 +0200)
commit243e72e20446b25496887304f3e01e26702b0ac7
tree3cba8bd40af1d879bd76681abb04095c34a9e081
parent1bc27eb71b55e738d5e54ee16a7c561b30441cf5
net: evaluate net.ipvX.conf.all.disable_policy and disable_xfrm

[ Upstream commit 62679a8d3aa4ba15ff63574a43e5686078d7b804 ]

The disable_policy and disable_xfrm are a per-interface sysctl to
disable IPsec policy or encryption on an interface. However, while a
"all" variant is exposed, it was a noop since it was never evaluated.
We use the usual "or" logic for this kind of sysctls.

Signed-off-by: Vincent Bernat <vincent@bernat.ch>
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/ipv4/route.c