Re: [PATCH ipsec] xfrm: fix dflt policy check when there is no policy configured
From: Steffen Klassert <steffen.klassert@secunet.com>
Date: 2021-11-25 09:44:13
Also in:
stable
On Mon, Nov 22, 2021 at 11:33:13AM +0100, Nicolas Dichtel wrote:
When there is no policy configured on the system, the default policy is
checked in xfrm_route_forward. However, it was done with the wrong
direction (XFRM_POLICY_FWD instead of XFRM_POLICY_OUT).
The default policy for XFRM_POLICY_FWD was checked just before, with a call
to xfrm[46]_policy_check().
CC: stable@vger.kernel.org
Fixes: 2d151d39073a ("xfrm: Add possibility to set the default to block if we have no policy")
Signed-off-by: Nicolas Dichtel <redacted>Applied, thanks Nicolas!