We link all policies to this list, but don't use it for any purpose.
Index: sys/net/pfkeyv2.c
===================================================================
RCS file: /cvs/src/sys/net/pfkeyv2.c,v
retrieving revision 1.255
diff -u -p -r1.255 pfkeyv2.c
--- sys/net/pfkeyv2.c 8 Jan 2023 10:26:36 -0000 1.255
+++ sys/net/pfkeyv2.c 20 Jan 2023 13:39:02 -0000
@@ -2012,7 +2012,6 @@ pfkeyv2_dosend(struct socket *so, void *
NET_UNLOCK();
goto ret;
}
- TAILQ_INSERT_HEAD(&ipsec_policy_head, ipo, ipo_list);
ipsec_in_use++;
} else {
ipo->ipo_last_searched = ipo->ipo_flags = 0;
Index: sys/netinet/ip_ipsp.c
===================================================================
RCS file: /cvs/src/sys/netinet/ip_ipsp.c,v
retrieving revision 1.275
diff -u -p -r1.275 ip_ipsp.c
--- sys/netinet/ip_ipsp.c 11 Nov 2022 18:09:58 -0000 1.275
+++ sys/netinet/ip_ipsp.c 20 Jan 2023 13:39:02 -0000
@@ -111,8 +111,6 @@ struct pool tdb_pool;
u_int32_t ipsec_ids_next_flow = 1; /* [F] may not be zero */
struct ipsec_ids_tree ipsec_ids_tree; /* [F] */
struct ipsec_ids_flows ipsec_ids_flows; /* [F] */
-struct ipsec_policy_head ipsec_policy_head =
- TAILQ_HEAD_INITIALIZER(ipsec_policy_head);
void ipsp_ids_gc(void *);
Index: sys/netinet/ip_ipsp.h
===================================================================
RCS file: /cvs/src/sys/netinet/ip_ipsp.h,v
retrieving revision 1.240
diff -u -p -r1.240 ip_ipsp.h
--- sys/netinet/ip_ipsp.h 14 Jul 2022 13:52:10 -0000 1.240
+++ sys/netinet/ip_ipsp.h 20 Jan 2023 13:39:02 -0000
@@ -293,7 +293,6 @@ struct ipsec_policy {
struct ipsec_acquire_head ipo_acquires; /* [A] List of acquires */
TAILQ_ENTRY(ipsec_policy) ipo_tdb_next; /* [P] List TDB policies */
- TAILQ_ENTRY(ipsec_policy) ipo_list; /* List of all policies */
};
#define IPSP_POLICY_NONE 0x0000 /* No flags set */
@@ -565,8 +564,6 @@ extern int ipsec_exp_first_use; /* seco
extern char ipsec_def_enc[];
extern char ipsec_def_auth[];
extern char ipsec_def_comp[];
-
-extern TAILQ_HEAD(ipsec_policy_head, ipsec_policy) ipsec_policy_head;
extern struct mutex tdb_sadb_mtx;
extern struct mutex ipo_tdb_mtx;
Index: sys/netinet/ip_spd.c
===================================================================
RCS file: /cvs/src/sys/netinet/ip_spd.c,v
retrieving revision 1.117
diff -u -p -r1.117 ip_spd.c
--- sys/netinet/ip_spd.c 17 Jun 2022 13:40:21 -0000 1.117
+++ sys/netinet/ip_spd.c 20 Jan 2023 13:39:02 -0000
@@ -697,8 +697,6 @@ ipsec_delete_policy(struct ipsec_policy
ipsp_delete_acquire_locked(ipa);
mtx_leave(&ipsec_acquire_mtx);
- TAILQ_REMOVE(&ipsec_policy_head, ipo, ipo_list);
-
if (ipo->ipo_ids)
ipsp_ids_free(ipo->ipo_ids);