Commit a2c97246 authored by Vincent Bernat's avatar Vincent Bernat Committed by Zheng Zengkai
Browse files

net: evaluate net.ipvX.conf.all.disable_policy and disable_xfrm

stable inclusion
from stable-v5.10.118
commit 243e72e20446b25496887304f3e01e26702b0ac7
category: bugfix
bugzilla: https://gitee.com/openeuler/kernel/issues/I5L686

Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=243e72e20446b25496887304f3e01e26702b0ac7



--------------------------------

[ Upstream commit 62679a8d ]

The disable_policy and disable_xfrm are a per-interface sysctl to
disable IPsec policy or encryption on an interface. However, while a
"all" variant is exposed, it was a noop since it was never evaluated.
We use the usual "or" logic for this kind of sysctls.

Signed-off-by: default avatarVincent Bernat <vincent@bernat.ch>
Signed-off-by: default avatarJakub Kicinski <kuba@kernel.org>
Signed-off-by: default avatarSasha Levin <sashal@kernel.org>
Signed-off-by: default avatarZheng Zengkai <zhengzengkai@huawei.com>
Acked-by: default avatarXie XiuQi <xiexiuqi@huawei.com>
parent 8273d6e7
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment