(off-list ancestor, not in this archive)
[PATCH v2 ipsec-next] xfrm: Add possibility to set the default to block if we have no policy · Antony Antony <hidden> · 2021-07-18
Re: [PATCH v2 ipsec-next] xfrm: Add possibility to set the default to block if we have no policy · Steffen Klassert <steffen.klassert@secunet.com> · 2021-07-22
Re: [PATCH v2 ipsec-next] xfrm: Add possibility to set the default to block if we have no policy · Nicolas Dichtel <hidden> · 2021-08-11
Re: [PATCH v2 ipsec-next] xfrm: Add possibility to set the default to block if we have no policy · Antony Antony <hidden> · 2021-08-17
Re: [PATCH v2 ipsec-next] xfrm: Add possibility to set the default to block if we have no policy · Nicolas Dichtel <hidden> · 2021-08-25
[PATCH ipsec 0/2] xfrm: fix uapi for the default policy · Nicolas Dichtel <hidden> · 2021-09-07
[RFC PATCH iproute2] xfrm: enable to manage default policies · Nicolas Dichtel <hidden> · 2021-09-07
[PATCH ipsec 2/2] xfrm: notify default policy on update · Nicolas Dichtel <hidden> · 2021-09-07
Re: [PATCH ipsec 2/2] xfrm: notify default policy on update · kernel test robot <hidden> · 2021-09-08
[PATCH ipsec v2 0/2] xfrm: fix uapi for the default policy · Nicolas Dichtel <hidden> · 2021-09-08
[RFC PATCH iproute2 v2] xfrm: enable to manage default policies · Nicolas Dichtel <hidden> · 2021-09-08
[PATCH ipsec v2 2/2] xfrm: notify default policy on update · Nicolas Dichtel <hidden> · 2021-09-08
[PATCH ipsec v2 1/2] xfrm: make user policy API complete · Nicolas Dichtel <hidden> · 2021-09-08
[PATCH ipsec v3 0/2] xfrm: fix uapi for the default policy · Nicolas Dichtel <hidden> · 2021-09-14
[PATCH ipsec v3 1/2] xfrm: make user policy API complete · Nicolas Dichtel <hidden> · 2021-09-14
[PATCH ipsec v3 2/2] xfrm: notify default policy on update · Nicolas Dichtel <hidden> · 2021-09-14
[RFC PATCH iproute2 v2] xfrm: enable to manage default policies · Nicolas Dichtel <hidden> · 2021-09-14
Re: [PATCH ipsec v3 0/2] xfrm: fix uapi for the default policy · Antony Antony <hidden> · 2021-09-15
Re: [PATCH ipsec v3 0/2] xfrm: fix uapi for the default policy · Nicolas Dichtel <hidden> · 2021-09-15
Re: [PATCH ipsec v3 0/2] xfrm: fix uapi for the default policy · Steffen Klassert <steffen.klassert@secunet.com> · 2021-09-17
Re: [PATCH ipsec v3 0/2] xfrm: fix uapi for the default policy · Nicolas Dichtel <hidden> · 2021-09-17
[PATCH ipsec 1/2] xfrm: make user policy API complete · Nicolas Dichtel <hidden> · 2021-09-07
Re: [PATCH v2 ipsec-next] xfrm: Add possibility to set the default to block if we have no policy · Dmitry V. Levin <hidden> · 2021-09-01
Re: [PATCH v2 ipsec-next] xfrm: Add possibility to set the default to block if we have no policy · Steffen Klassert <steffen.klassert@secunet.com> · 2021-09-02
Re: [PATCH v2 ipsec-next] xfrm: Add possibility to set the default to block if we have no policy · Paul Cercueil <paul@crapouillou.net> · 2021-09-19
Re: [PATCH v2 ipsec-next] xfrm: Add possibility to set the default to block if we have no policy · Steffen Klassert <steffen.klassert@secunet.com> · 2021-09-21

Re: [PATCH ipsec v3 0/2] xfrm: fix uapi for the default policy

From: Steffen Klassert <steffen.klassert@secunet.com>
Date: 2021-09-17 07:06:15

On Tue, Sep 14, 2021 at 04:46:32PM +0200, Nicolas Dichtel wrote:

This feature has just been merged after the last release, thus it's still
time to fix the uapi.
As stated in the thread, the uapi is based on some magic values (from the
userland POV).
Here is a proposal to simplify this uapi and make it clear how to use it.
The other problem was the notification: changing the default policy may
radically change the packets flows.

v2 -> v3: rebase on top of ipsec tree

v1 -> v2: fix warnings reported by the kernel test robot

Nicolas Dichtel (2):
  xfrm: make user policy API complete
  xfrm: notify default policy on update

Applied, thanks a lot Nicolas!

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help