Public bug reported:
* Explain the bug(s) commit a3ca11eec78 introduced a flags validity check for XFRM , the check excluded flag XFRM_OFFLOAD_FULL from the check hence the flag is being blocked from getting to the kernel space. The above is preventing IPsec states from being added with the full_offload option. * Brief explanation of fixes The commit restricted unknown flags from being configured from user space by adding a validity check, since the Bluefield feature added such a flag , the fix expands the validity check to include this flag which is added only in Bluefield kernel . * How to test Need to make sure that configuring IPsec with full_offload option using IProute2 can be done successfully with no issues. (Not getting the RTNETLINK answers: Invalid argument error anymore) * What it could break. NA, this patch allows a specific flag to get passed to the kernel space, the kernel was using this flag already however after validity check got introduced the flag just got blocked from getting to the kernel. ** Affects: linux-bluefield (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux-bluefield in Ubuntu. https://bugs.launchpad.net/bugs/1978967 Title: Fix XFRM flags validity check Status in linux-bluefield package in Ubuntu: New Bug description: * Explain the bug(s) commit a3ca11eec78 introduced a flags validity check for XFRM , the check excluded flag XFRM_OFFLOAD_FULL from the check hence the flag is being blocked from getting to the kernel space. The above is preventing IPsec states from being added with the full_offload option. * Brief explanation of fixes The commit restricted unknown flags from being configured from user space by adding a validity check, since the Bluefield feature added such a flag , the fix expands the validity check to include this flag which is added only in Bluefield kernel . * How to test Need to make sure that configuring IPsec with full_offload option using IProute2 can be done successfully with no issues. (Not getting the RTNETLINK answers: Invalid argument error anymore) * What it could break. NA, this patch allows a specific flag to get passed to the kernel space, the kernel was using this flag already however after validity check got introduced the flag just got blocked from getting to the kernel. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux-bluefield/+bug/1978967/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp