linux-stable.git/include/linux/xfrm.h, branch linux-2.6.20.y

[XFRM]: Fix XFRMGRP_REPORT to use correct multicast group.

2006-12-09T01:19:30+00:00

XFRMGRP_REPORT uses 0x10 which is a group that belongs
to events. The correct value is 0x20.
We should really be using xfrm_nlgroups going forward; it was tempting
to delete the definition of XFRMGRP_REPORT but it would break at
least iproute2.

Signed-off-by: J Hadi Salim 
Signed-off-by: David S. Miller

[XFRM]: Fix aevent structuring to be more complete.

2006-12-03T06:22:25+00:00

aevents can not uniquely identify an SA. We break the ABI with this
patch, but consensus is that since it is not yet utilized by any
(known) application then it is fine (better do it now than later).

Signed-off-by: Jamal Hadi Salim 
Signed-off-by: David S. Miller

[IPV4]: encapsulation annotations

2006-12-03T05:21:17+00:00

Signed-off-by: Al Viro 
Signed-off-by: David S. Miller

[XFRM]: BEET mode

2006-10-04T07:31:09+00:00

This patch introduces the BEET mode (Bound End-to-End Tunnel) with as
specified by the ietf draft at the following link:

http://www.ietf.org/internet-drafts/draft-nikander-esp-beet-mode-06.txt

The patch provides only single family support (i.e. inner family =
outer family).

Signed-off-by: Diego Beltrami 
Signed-off-by: Miika Komu     
Signed-off-by: Herbert Xu     
Signed-off-by: Abhinav Pathak 
Signed-off-by: Jeff Ahrenholz 
Signed-off-by: David S. Miller

[XFRM]: struct xfrm_usersa_id annotations

2006-09-29T01:02:42+00:00

Signed-off-by: Al Viro 
Signed-off-by: David S. Miller

[XFRM]: struct xfrm_id annotations

2006-09-29T01:02:38+00:00

Signed-off-by: Al Viro 
Signed-off-by: David S. Miller

[XFRM]: xfrm_address_t annotations

2006-09-29T01:02:35+00:00

Signed-off-by: Al Viro 
Signed-off-by: David S. Miller

[XFRM]: ports in struct xfrm_selector annotated

2006-09-29T01:02:33+00:00

Signed-off-by: Al Viro 
Signed-off-by: David S. Miller

[XFRM] POLICY: Support netlink socket interface for sub policy.

2006-09-22T22:08:35+00:00

Sub policy can be used through netlink socket.
PF_KEY uses main only and it is TODO to support sub.

Signed-off-by: Masahide NAKAMURA 
Signed-off-by: YOSHIFUJI Hideaki 
Signed-off-by: David S. Miller

[XFRM] POLICY: sub policy support.

2006-09-22T22:08:34+00:00

Sub policy is introduced. Main and sub policy are applied the same flow.
(Policy that current kernel uses is named as main.)
It is required another transformation policy management to keep IPsec
and Mobile IPv6 lives separate.
Policy which lives shorter time in kernel should be a sub i.e. normally
main is for IPsec and sub is for Mobile IPv6.
(Such usage as two IPsec policies on different database can be used, too.)

Limitation or TODOs:
 - Sub policy is not supported for per socket one (it is always inserted as main).
 - Current kernel makes cached outbound with flowi to skip searching database.
   However this patch makes it disabled only when "two policies are used and
   the first matched one is bypass case" because neither flowi nor bundle
   information knows about transformation template size.

Signed-off-by: Masahide NAKAMURA 
Signed-off-by: YOSHIFUJI Hideaki