Re: [PATCH net-next v2 10/13] macsec: use NLA_POLICY_VALIDATE_FN to validate... | netdev

[PATCH net-next v2 00/13] macsec: replace custom netlink attribute checks with policy-level checks · Sabrina Dubroca <sd@queasysnail.net> · 2025-08-26
[PATCH net-next v2 01/13] macsec: replace custom checks on MACSEC_SA_ATTR_AN with NLA_POLICY_MAX · Sabrina Dubroca <sd@queasysnail.net> · 2025-08-26
Re: [PATCH net-next v2 01/13] macsec: replace custom checks on MACSEC_SA_ATTR_AN with NLA_POLICY_MAX · Simon Horman <horms@kernel.org> · 2025-08-27
[PATCH net-next v2 02/13] macsec: replace custom checks on MACSEC_*_ATTR_ACTIVE with NLA_POLICY_MAX · Sabrina Dubroca <sd@queasysnail.net> · 2025-08-26
Re: [PATCH net-next v2 02/13] macsec: replace custom checks on MACSEC_*_ATTR_ACTIVE with NLA_POLICY_MAX · Simon Horman <horms@kernel.org> · 2025-08-27
[PATCH net-next v2 03/13] macsec: replace custom checks on MACSEC_SA_ATTR_SALT with NLA_POLICY_EXACT_LEN · Sabrina Dubroca <sd@queasysnail.net> · 2025-08-26
Re: [PATCH net-next v2 03/13] macsec: replace custom checks on MACSEC_SA_ATTR_SALT with NLA_POLICY_EXACT_LEN · Simon Horman <horms@kernel.org> · 2025-08-27
[PATCH net-next v2 04/13] macsec: replace custom checks on MACSEC_SA_ATTR_KEYID with NLA_POLICY_EXACT_LEN · Sabrina Dubroca <sd@queasysnail.net> · 2025-08-26
Re: [PATCH net-next v2 04/13] macsec: replace custom checks on MACSEC_SA_ATTR_KEYID with NLA_POLICY_EXACT_LEN · Simon Horman <horms@kernel.org> · 2025-08-27
[PATCH net-next v2 05/13] macsec: use NLA_POLICY_MAX_LEN for MACSEC_SA_ATTR_KEY · Sabrina Dubroca <sd@queasysnail.net> · 2025-08-26
Re: [PATCH net-next v2 05/13] macsec: use NLA_POLICY_MAX_LEN for MACSEC_SA_ATTR_KEY · Simon Horman <horms@kernel.org> · 2025-08-27
[PATCH net-next v2 06/13] macsec: use NLA_UINT for MACSEC_SA_ATTR_PN · Sabrina Dubroca <sd@queasysnail.net> · 2025-08-26
Re: [PATCH net-next v2 06/13] macsec: use NLA_UINT for MACSEC_SA_ATTR_PN · Simon Horman <horms@kernel.org> · 2025-08-27
Re: [PATCH net-next v2 06/13] macsec: use NLA_UINT for MACSEC_SA_ATTR_PN · Jakub Kicinski <kuba@kernel.org> · 2025-08-28
Re: [PATCH net-next v2 06/13] macsec: use NLA_UINT for MACSEC_SA_ATTR_PN · Jakub Kicinski <kuba@kernel.org> · 2025-08-28
Re: [PATCH net-next v2 06/13] macsec: use NLA_UINT for MACSEC_SA_ATTR_PN · Sabrina Dubroca <sd@queasysnail.net> · 2025-08-28
Re: [PATCH net-next v2 06/13] macsec: use NLA_UINT for MACSEC_SA_ATTR_PN · Jakub Kicinski <kuba@kernel.org> · 2025-08-28
[PATCH net-next v2 07/13] macsec: remove validate_add_rxsc · Sabrina Dubroca <sd@queasysnail.net> · 2025-08-26
Re: [PATCH net-next v2 07/13] macsec: remove validate_add_rxsc · Simon Horman <horms@kernel.org> · 2025-08-27
[PATCH net-next v2 08/13] macsec: add NLA_POLICY_MAX for MACSEC_OFFLOAD_ATTR_TYPE and IFLA_MACSEC_OFFLOAD · Sabrina Dubroca <sd@queasysnail.net> · 2025-08-26
Re: [PATCH net-next v2 08/13] macsec: add NLA_POLICY_MAX for MACSEC_OFFLOAD_ATTR_TYPE and IFLA_MACSEC_OFFLOAD · Simon Horman <horms@kernel.org> · 2025-08-27
Re: [PATCH net-next v2 08/13] macsec: add NLA_POLICY_MAX for MACSEC_OFFLOAD_ATTR_TYPE and IFLA_MACSEC_OFFLOAD · Jakub Kicinski <kuba@kernel.org> · 2025-08-28
Re: [PATCH net-next v2 08/13] macsec: add NLA_POLICY_MAX for MACSEC_OFFLOAD_ATTR_TYPE and IFLA_MACSEC_OFFLOAD · Sabrina Dubroca <sd@queasysnail.net> · 2025-08-28
[PATCH net-next v2 09/13] macsec: replace custom checks on IFLA_MACSEC_ICV_LEN with NLA_POLICY_RANGE · Sabrina Dubroca <sd@queasysnail.net> · 2025-08-26
Re: [PATCH net-next v2 09/13] macsec: replace custom checks on IFLA_MACSEC_ICV_LEN with NLA_POLICY_RANGE · Simon Horman <horms@kernel.org> · 2025-08-27
[PATCH net-next v2 10/13] macsec: use NLA_POLICY_VALIDATE_FN to validate IFLA_MACSEC_CIPHER_SUITE · Sabrina Dubroca <sd@queasysnail.net> · 2025-08-26
Re: [PATCH net-next v2 10/13] macsec: use NLA_POLICY_VALIDATE_FN to validate IFLA_MACSEC_CIPHER_SUITE · Simon Horman <horms@kernel.org> · 2025-08-27
[PATCH net-next v2 11/13] macsec: validate IFLA_MACSEC_VALIDATION with NLA_POLICY_MAX · Sabrina Dubroca <sd@queasysnail.net> · 2025-08-26
Re: [PATCH net-next v2 11/13] macsec: validate IFLA_MACSEC_VALIDATION with NLA_POLICY_MAX · Simon Horman <horms@kernel.org> · 2025-08-27
[PATCH net-next v2 12/13] macsec: replace custom checks for IFLA_MACSEC_* flags with NLA_POLICY_MAX · Sabrina Dubroca <sd@queasysnail.net> · 2025-08-26
Re: [PATCH net-next v2 12/13] macsec: replace custom checks for IFLA_MACSEC_* flags with NLA_POLICY_MAX · Simon Horman <horms@kernel.org> · 2025-08-27
[PATCH net-next v2 13/13] macsec: replace custom check on IFLA_MACSEC_ENCODING_SA with NLA_POLICY_MAX · Sabrina Dubroca <sd@queasysnail.net> · 2025-08-26
Re: [PATCH net-next v2 13/13] macsec: replace custom check on IFLA_MACSEC_ENCODING_SA with NLA_POLICY_MAX · Simon Horman <horms@kernel.org> · 2025-08-27
Re: [PATCH net-next v2 00/13] macsec: replace custom netlink attribute checks with policy-level checks · patchwork-bot+netdevbpf@kernel.org · 2025-08-28

Re: [PATCH net-next v2 10/13] macsec: use NLA_POLICY_VALIDATE_FN to validate IFLA_MACSEC_CIPHER_SUITE

From: Simon Horman <horms@kernel.org>
Date: 2025-08-27 16:56:04

On Tue, Aug 26, 2025 at 03:16:28PM +0200, Sabrina Dubroca wrote:

Unfortunately, since the value of MACSEC_DEFAULT_CIPHER_ID doesn't fit
near the others, we can't use a simple range in the policy.

Signed-off-by: Sabrina Dubroca <sd@queasysnail.net>

Reviewed-by: Simon Horman <horms@kernel.org>

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help