Public bug reported:

* Explain the bug(s)
commit a3ca11eec78 introduced a flags validity check for XFRM , the check 
excluded flag XFRM_OFFLOAD_FULL from the check hence the flag is being blocked 
from getting to the kernel space. 
The above is preventing IPsec states from being added with the full_offload 
option.

* Brief explanation of fixes
The commit restricted unknown flags from being configured from user space by 
adding a validity check, 
since the Bluefield feature added such a flag , the fix expands the validity 
check to include this flag which is added
only in Bluefield kernel .
 
* How to test
Need to make sure that configuring IPsec with full_offload option using 
IProute2 can be done successfully with no issues.
(Not getting the RTNETLINK answers: Invalid argument error anymore)

* What it could break.
NA, this patch allows a specific flag to get passed to the kernel space, the 
kernel was using this flag already however after validity check got introduced 
the flag just got blocked from getting to the kernel.

** Affects: linux-bluefield (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux-bluefield in Ubuntu.
https://bugs.launchpad.net/bugs/1978967

Title:
  Fix XFRM flags validity check

Status in linux-bluefield package in Ubuntu:
  New

Bug description:
  
  * Explain the bug(s)
  commit a3ca11eec78 introduced a flags validity check for XFRM , the check 
excluded flag XFRM_OFFLOAD_FULL from the check hence the flag is being blocked 
from getting to the kernel space. 
  The above is preventing IPsec states from being added with the full_offload 
option.

  * Brief explanation of fixes
  The commit restricted unknown flags from being configured from user space by 
adding a validity check, 
  since the Bluefield feature added such a flag , the fix expands the validity 
check to include this flag which is added
  only in Bluefield kernel .
   
  * How to test
  Need to make sure that configuring IPsec with full_offload option using 
IProute2 can be done successfully with no issues.
  (Not getting the RTNETLINK answers: Invalid argument error anymore)

  * What it could break.
  NA, this patch allows a specific flag to get passed to the kernel space, the 
kernel was using this flag already however after validity check got introduced 
the flag just got blocked from getting to the kernel.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-bluefield/+bug/1978967/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to