Commit ee8372dd1989287c5eedb69d44bac43f69e496f1

Authored by Nicolas Dichtel
Committed by David S. Miller
1 parent b42664f898

xfrm: invalidate dst on policy insertion/deletion

When a policy is inserted or deleted, all dst should be recalculated.

Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

Showing 2 changed files with 2 additions and 0 deletions Side-by-side Diff

net/xfrm/xfrm_policy.c
... ... @@ -585,6 +585,7 @@
585 585 xfrm_pol_hold(policy);
586 586 net->xfrm.policy_count[dir]++;
587 587 atomic_inc(&flow_cache_genid);
  588 + rt_genid_bump(net);
588 589 if (delpol)
589 590 __xfrm_policy_unlink(delpol, dir);
590 591 policy->index = delpol ? delpol->index : xfrm_gen_index(net, dir);
security/selinux/include/xfrm.h
... ... @@ -51,6 +51,7 @@
51 51 static inline void selinux_xfrm_notify_policyload(void)
52 52 {
53 53 atomic_inc(&flow_cache_genid);
  54 + rt_genid_bump(&init_net);
54 55 }
55 56 #else
56 57 static inline int selinux_xfrm_enabled(void)