Saurabh Mohan b2942004fb ipv4/ip_vti.c: VTI fix post-decryption forwarding ... With the latest kernel there are two things that must be done post decryption so that the packet are forwarded. 1. Remove the mark from the packet. This will cause the packet to not match the ipsec-policy again. However doing this causes the post-decryption check to fail also and the packet will get dropped. (cat /proc/net/xfrm_stat). 2. Remove the sp association in the skbuff so that no policy check is done on the packet for VTI tunnels. Due to #2 above we must now do a security-policy check in the vti rcv path prior to resetting the mark in the skbuff. Signed-off-by: Saurabh Mohan <saurabh.mohan@vyatta.com> Reported-by: Ruben Herold <ruben@puettmann.net> Signed-off-by: David S. Miller <davem@davemloft.net>		2012-11-14 21:40:21 -05:00
..
9p	The following changes since commit 4cbe5a555f:	2012-10-12 09:59:23 +09:00
802
8021q	vlan: allow to change type when no vlan device is hooked on netdev	2012-10-18 15:34:30 -04:00
appletalk
atm
ax25
batman-adv	batman-adv: Fix potential broadcast BLA-duplicate-check race condition	2012-10-18 18:17:31 +02:00
bluetooth	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth	2012-10-15 14:34:23 -04:00
bridge	bridge: Pull ip header into skb->data before looking into ip header.	2012-10-10 22:50:45 -04:00
caif
can	sections: fix section conflicts in net/can	2012-10-06 03:04:45 +09:00
ceph	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client	2012-10-29 08:49:25 -07:00
core	af-packet: fix oops when socket is not present	2012-11-07 15:40:14 -05:00
dcb
dccp
decnet	sections: fix section conflicts in net	2012-10-06 03:04:45 +09:00
dns_resolver	Merge branch 'modules-next' of git://git.kernel.org/pub/scm/linux/kernel/git/rusty/linux	2012-10-14 13:39:34 -07:00
dsa
ethernet
ieee802154	net/ieee802154/6lowpan.c: Remove unecessary semicolon	2012-09-18 16:08:19 -04:00
ipv4	ipv4/ip_vti.c: VTI fix post-decryption forwarding	2012-11-14 21:40:21 -05:00
ipv6	ipv6: setsockopt(IPIPPROTO_IPV6, IPV6_MINHOPCOUNT) forgot to set return value	2012-11-13 14:38:47 -05:00
ipx
irda	Merge 3.7-rc1 into tty-linus	2012-10-14 22:41:27 -07:00
iucv
key	net/key/af_key.c: add range checks on ->sadb_x_policy_len	2012-10-01 17:15:06 -04:00
l2tp	l2tp: fix oops in l2tp_eth_create() error path	2012-11-02 21:56:35 -04:00
lapb
llc	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace	2012-10-02 11:11:09 -07:00
mac80211	Merge branch 'for-john' of git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211	2012-10-29 14:14:48 -04:00
mac802154
netfilter	netfilter: nf_conntrack: fix rt_gateway checks for H.323 helper	2012-10-22 12:21:55 +02:00
netlabel	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2012-10-02 13:38:27 -07:00
netlink	netlink: use kfree_rcu() in netlink_release()	2012-10-18 15:34:30 -04:00
netrom	net: change return values from -EACCES to -EPERM	2012-09-21 13:58:08 -04:00
nfc	Remove noisy printks from llcp_sock_connect	2012-10-04 15:58:47 -04:00
openvswitch	net/openvswitch/vport.c: Remove unecessary semicolon	2012-09-18 16:08:19 -04:00
packet	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace	2012-10-02 11:11:09 -07:00
phonet
rds	RDS: fix rds-ping spinlock recursion	2012-10-09 13:57:23 -04:00
rfkill	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2012-10-02 13:38:27 -07:00
rose
rxrpc	Merge branch 'modules-next' of git://git.kernel.org/pub/scm/linux/kernel/git/rusty/linux	2012-10-14 13:39:34 -07:00
sched	pkt_sched: enable QFQ to support TSO/GSO	2012-11-07 15:37:04 -05:00
sctp	net: sctp: Fix typo in net/sctp	2012-11-01 11:55:19 -04:00
sunrpc	SUNRPC: return proper errno from backchannel_rqst	2012-11-01 11:50:53 -04:00
tipc	tipc: do not use tasklet_disable before tasklet_kill	2012-11-03 15:10:14 -04:00
unix
wanrouter
wimax
wireless	mac80211: verify that skb data is present	2012-10-26 22:52:42 +02:00
x25
xfrm	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2012-10-02 13:38:27 -07:00
compat.c	make get_file() return its argument	2012-09-26 21:10:25 -04:00
Kconfig
Makefile
nonet.c
socket.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2012-10-02 20:25:04 -07:00
sysctl_net.c