Changes in Kconfig

93c21077 - net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL

Mon, 16 Sep 2024 18:57:13 +0000

net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNELThe rpl sr tunnel code contains calls to dst_cache_*() which areonly present when the dst cache is built.Select DST_CACHE to build the dst cache, similar to other kconfigoptions in the same file.Compiling the rpl sr tunnel without DST_CACHE will lead to linkererrors.Fixes: a7a29f9c361f ("net: ipv6: add rpl sr tunnel")Signed-off-by: Thomas Weißschuh Reviewed-by: Simon Horman Tested-by: Simon Horman # build-testedSigned-off-by: David S. Miller List of files: /linux-6.15/net/ipv6/Kconfig

b35c9683 - ipv6: fix indentation of a config attribute

Wed, 16 Aug 2023 07:56:06 +0000

ipv6: fix indentation of a config attributeFix indentation of a type attribute of IPV6_VTI config entry.Signed-off-by: Prasad Pandit Signed-off-by: David S. Miller List of files: /linux-6.15/net/ipv6/Kconfig

ec8f7f48 - crypto: lib - make the sha1 library optional

Sat, 09 Jul 2022 21:18:49 +0000

crypto: lib - make the sha1 library optionalSince the Linux RNG no longer uses sha1_transform(), the SHA-1 libraryis no longer needed unconditionally. Make it possible to build theLinux kernel without the SHA-1 library by putting it behind a kconfigoption, and selecting this new option from the kconfig options that gatethe remaining users: CRYPTO_SHA1 for crypto/sha1_generic.c, BPF forkernel/bpf/core.c, and IPV6 for net/ipv6/addrconf.c.Unfortunately, since BPF is selected by NET, for now this can only makea difference for kernels built without networking support.Signed-off-by: Eric Biggers Reviewed-by: Jason A. Donenfeld Acked-by: Jakub Kicinski Acked-by: Alexei Starovoitov Signed-off-by: Herbert Xu List of files: /linux-6.15/net/ipv6/Kconfig

8cb3bf8b - ipv6: ioam: Add support for the ip6ip6 encapsulation

Sun, 03 Oct 2021 18:45:38 +0000

ipv6: ioam: Add support for the ip6ip6 encapsulationThis patch adds support for the ip6ip6 encapsulation by providing three encapmodes: inline, encap and auto.Signed-off-by: Justin Iurman Signed-off-by: David S. Miller List of files: /linux-6.15/net/ipv6/Kconfig

3edede08 - ipv6: ioam: Support for IOAM injection with lwtunnels

Tue, 20 Jul 2021 19:42:59 +0000

ipv6: ioam: Support for IOAM injection with lwtunnelsAdd support for the IOAM inline insertion (only for the host-to-host use case)which is per-route configured with lightweight tunnels. The target is iproute2and the patch is ready. It will be posted as soon as this patchset is merged.Here is an overview:$ ip -6 ro ad fc00::1/128 encap ioam6 trace type 0x800000 ns 1 size 12 dev eth0This example configures an IOAM Pre-allocated Trace option attached to thefc00::1/128 prefix. The IOAM namespace (ns) is 1, the size of the pre-allocatedtrace data block is 12 octets (size) and only the first IOAM data (bit 0:hop_limit + node id) is included in the trace (type) represented as a bitfield.The reason why the in-transit (IPv6-in-IPv6 encapsulation) use case is notimplemented is explained on the patchset cover.Signed-off-by: Justin Iurman Signed-off-by: David S. Miller List of files: /linux-6.15/net/ipv6/Kconfig

db7cd91a - net: ipv6: fix kconfig dependency warning for IPV6_SEG6_HMAC

Thu, 17 Sep 2020 16:46:43 +0000

net: ipv6: fix kconfig dependency warning for IPV6_SEG6_HMACWhen IPV6_SEG6_HMAC is enabled and CRYPTO is disabled, it results in thefollowing Kbuild warning:WARNING: unmet direct dependencies detected for CRYPTO_HMAC Depends on [n]: CRYPTO [=n] Selected by [y]: - IPV6_SEG6_HMAC [=y] && NET [=y] && INET [=y] && IPV6 [=y]WARNING: unmet direct dependencies detected for CRYPTO_SHA1 Depends on [n]: CRYPTO [=n] Selected by [y]: - IPV6_SEG6_HMAC [=y] && NET [=y] && INET [=y] && IPV6 [=y]WARNING: unmet direct dependencies detected for CRYPTO_SHA256 Depends on [n]: CRYPTO [=n] Selected by [y]: - IPV6_SEG6_HMAC [=y] && NET [=y] && INET [=y] && IPV6 [=y]The reason is that IPV6_SEG6_HMAC selects CRYPTO_HMAC, CRYPTO_SHA1, andCRYPTO_SHA256 without depending on or selecting CRYPTO while those configsare subordinate to CRYPTO.Honor the kconfig menu hierarchy to remove kconfig dependency warnings.Fixes: bf355b8d2c30 ("ipv6: sr: add core files for SR HMAC support")Signed-off-by: Necip Fazil Yildiran Signed-off-by: David S. Miller List of files: /linux-6.15/net/ipv6/Kconfig

7a6498eb - Replace HTTP links with HTTPS ones: IPv*

Mon, 06 Jul 2020 17:38:50 +0000

Replace HTTP links with HTTPS ones: IPv*Rationale:Reduces attack surface on kernel devs opening the links for MITMas HTTPS traffic is much harder to manipulate.Deterministic algorithm:For each file: If not .svg: For each line: If doesn't contain `\bxmlns\b`: For each link, `\bhttp://[^# \t\r\n]*(?:\w|/)`: If both the HTTP and HTTPS versions return 200 OK and serve the same content: Replace HTTP with HTTPS.Signed-off-by: Alexander A. Klimov Signed-off-by: David S. Miller List of files: /linux-6.15/net/ipv6/Kconfig

be013698 - esp, ah: modernize the crypto algorithm selections

Wed, 10 Jun 2020 16:14:37 +0000

esp, ah: modernize the crypto algorithm selectionsThe crypto algorithms selected by the ESP and AH kconfig options areout-of-date with the guidance of RFC 8221, which lists the legacyalgorithms MD5 and DES as "MUST NOT" be implemented, and some moremodern algorithms like AES-GCM and HMAC-SHA256 as "MUST" be implemented.But the options select the legacy algorithms, not the modern ones.Therefore, modify these options to select the MUST algorithms --and *only* the MUST algorithms.Also improve the help text.Note that other algorithms may still be explicitly enabled in thekconfig, and the choice of which to actually use is still controlled byuserspace. This change only modifies the list of algorithms for whichkernel support is guaranteed to be present.Suggested-by: Herbert Xu Suggested-by: Steffen Klassert Acked-by: Herbert Xu Cc: Corentin Labbe Cc: Greg Kroah-Hartman Signed-off-by: Eric Biggers Signed-off-by: Steffen Klassert List of files: /linux-6.15/net/ipv6/Kconfig

7d4e3919 - esp, ah: consolidate the crypto algorithm selections

Wed, 10 Jun 2020 16:14:35 +0000

esp, ah: consolidate the crypto algorithm selectionsInstead of duplicating the algorithm selections between INET_AH andINET6_AH and between INET_ESP and INET6_ESP, create new tristatesXFRM_AH and XFRM_ESP that do the algorithm selections, and make these beselected by the corresponding INET* options.Suggested-by: Herbert Xu Acked-by: Herbert Xu Cc: Corentin Labbe Cc: Greg Kroah-Hartman Cc: Steffen Klassert Signed-off-by: Eric Biggers Signed-off-by: Steffen Klassert List of files: /linux-6.15/net/ipv6/Kconfig

a7f7f624 - treewide: replace '---help---' in Kconfig files with 'help'

Sat, 13 Jun 2020 16:50:22 +0000

treewide: replace '---help---' in Kconfig files with 'help'Since commit 84af7a6194e4 ("checkpatch: kconfig: prefer 'help' over'---help---'"), the number of '---help---' has been graduallydecreasing, but there are still more than 2400 instances.This commit finishes the conversion. While I touched the lines,I also fixed the indentation.There are a variety of indentation styles found. a) 4 spaces + '---help---' b) 7 spaces + '---help---' c) 8 spaces + '---help---' d) 1 space + 1 tab + '---help---' e) 1 tab + '---help---' (correct indentation) f) 1 tab + 1 space + '---help---' g) 1 tab + 2 spaces + '---help---'In order to convert all of them to 1 tab + 'help', I ran thefollowing commend: $ find . -name 'Kconfig*' | xargs sed -i 's/^[[:space:]]*---help---/\thelp/'Signed-off-by: Masahiro Yamada List of files: /linux-6.15/net/ipv6/Kconfig

19093313 - docs: networking: convert ipv6.txt to ReST

Mon, 27 Apr 2020 22:01:50 +0000

docs: networking: convert ipv6.txt to ReSTNot much to be done here:- add SPDX header;- add a document title;- mark a literal as such, in order to avoid a warning;- add to networking/index.rst.Signed-off-by: Mauro Carvalho Chehab Signed-off-by: David S. Miller List of files: /linux-6.15/net/ipv6/Kconfig

26333c37 - xfrm: add IPv6 support for espintcp

Mon, 27 Apr 2020 15:59:35 +0000

xfrm: add IPv6 support for espintcpThis extends espintcp to support IPv6, building on the existing codeand the new UDPv6 encapsulation support. Most of the code is eitherreused directly (stream parser, ULP) or very similar to the IPv4variant (net/ipv6/esp6.c changes).The separation of config options for IPv4 and IPv6 espintcp requires abit of Kconfig gymnastics to enable the core code.Signed-off-by: Sabrina Dubroca Signed-off-by: Steffen Klassert List of files: /linux-6.15/net/ipv6/Kconfig

a7a29f9c - net: ipv6: add rpl sr tunnel

Fri, 27 Mar 2020 22:00:22 +0000

net: ipv6: add rpl sr tunnelThis patch adds functionality to configure routes for RPL source routingfunctionality. There is no IPIP functionality yet implemented which canbe added later when the cases when to use IPv6 encapuslation comes moreclear.Signed-off-by: Alexander Aring Signed-off-by: David S. Miller List of files: /linux-6.15/net/ipv6/Kconfig

ec8f24b7 - treewide: Add SPDX license identifier - Makefile/Kconfig

Sun, 19 May 2019 12:07:45 +0000

treewide: Add SPDX license identifier - Makefile/KconfigAdd SPDX license identifiers to all Make/Kconfig files which: - Have no license information of any formThese files fall under the project license, GPL v2 only. The resulting SPDXlicense identifier is: GPL-2.0-onlySigned-off-by: Thomas Gleixner Signed-off-by: Greg Kroah-Hartman List of files: /linux-6.15/net/ipv6/Kconfig

4c145dce - xfrm: make xfrm modes builtin

Fri, 29 Mar 2019 20:16:31 +0000

xfrm: make xfrm modes builtinafter previous changes, xfrm_mode contains no function pointers anymoreand all modules defining such struct contain no code except an init/exitfunctions to register the xfrm_mode struct with the xfrm core.Just place the xfrm modes core and remove the modules,the run-time xfrm_mode register/unregister functionality is removed.Before: text data bss dec filename 7523 200 2364 10087 net/xfrm/xfrm_input.o 40003 628 440 41071 net/xfrm/xfrm_state.o15730338 6937080 4046908 26714326 vmlinux 7389 200 2364 9953 net/xfrm/xfrm_input.o 40574 656 440 41670 net/xfrm/xfrm_state.o15730084 6937068 4046908 26714060 vmlinuxThe xfrm*_mode_{transport,tunnel,beet} modules are gone.v2: replace CONFIG_INET6_XFRM_MODE_* IS_ENABLED guards with CONFIG_IPV6 ones rather than removing them.Signed-off-by: Florian Westphal Reviewed-by: Sabrina Dubroca Signed-off-by: Steffen Klassert List of files: /linux-6.15/net/ipv6/Kconfig

e446a276 - net: remove blank lines at end of file

Tue, 24 Jul 2018 19:29:18 +0000

net: remove blank lines at end of fileSeveral files have extra line at end of file.Signed-off-by: Stephen Hemminger Signed-off-by: David S. Miller List of files: /linux-6.15/net/ipv6/Kconfig

83ed7d1f - ipv6: ila: select CONFIG_DST_CACHE

Wed, 18 Jul 2018 08:48:56 +0000

ipv6: ila: select CONFIG_DST_CACHEMy randconfig builds came across an old missing dependency for ILA:ERROR: "dst_cache_set_ip6" [net/ipv6/ila/ila.ko] undefined!ERROR: "dst_cache_get" [net/ipv6/ila/ila.ko] undefined!ERROR: "dst_cache_init" [net/ipv6/ila/ila.ko] undefined!ERROR: "dst_cache_destroy" [net/ipv6/ila/ila.ko] undefined!We almost never run into this by accident because randconfig buildsend up selecting DST_CACHE from some other tunnel protocol, and thisone appears to be the only one missing the explicit 'select'.>From all I can tell, this problem first appeared in linux-4.9when dst_cache support got added to ILA.Fixes: 79ff2fc31e0f ("ila: Cache a route to translated address")Cc: Tom Herbert Signed-off-by: Arnd Bergmann Signed-off-by: David S. Miller List of files: /linux-6.15/net/ipv6/Kconfig

fe94cc29 - bpf: Add IPv6 Segment Routing helpers

Sun, 20 May 2018 13:58:14 +0000

bpf: Add IPv6 Segment Routing helpersThe BPF seg6local hook should be powerful enough to enable users toimplement most of the use-cases one could think of. After some thinking,we figured out that the following actions should be possible on a SRv6packet, requiring 3 specific helpers : - bpf_lwt_seg6_store_bytes: Modify non-sensitive fields of the SRH - bpf_lwt_seg6_adjust_srh: Allow to grow or shrink a SRH (to add/delete TLVs) - bpf_lwt_seg6_action: Apply some SRv6 network programming actions (specifically End.X, End.T, End.B6 and End.B6.Encap)The specifications of these helpers are provided in the patch (seeinclude/uapi/linux/bpf.h).The non-sensitive fields of the SRH are the following : flags, tag andTLVs. The other fields can not be modified, to maintain the SRHintegrity. Flags, tag and TLVs can easily be modified as their validitycan be checked afterwards via seg6_validate_srh. It is not allowed tomodify the segments directly. If one wants to add segments on the path,he should stack a new SRH using the End.B6 action viabpf_lwt_seg6_action.Growing, shrinking or editing TLVs via the helpers will flag the SRH asinvalid, and it will have to be re-validated before re-entering the IPv6layer. This flag is stored in a per-CPU buffer, along with the currentheader length in bytes.Storing the SRH len in bytes in the control block is mandatory when usingbpf_lwt_seg6_adjust_srh. The Header Ext. Length field contains the SRHlen rounded to 8 bytes (a padding TLV can be inserted to ensure the 8-bytesboundary). When adding/deleting TLVs within the BPF program, the SRH maytemporary be in an invalid state where its length cannot be rounded to 8bytes without remainder, hence the need to store the length in bytesseparately. The caller of the BPF program can then ensure that the SRH'sfinal length is valid using this value. Again, a final SRH modified by aBPF program which doesn’t respect the 8-bytes boundary will be discardedas it will be considered as invalid.Finally, a fourth helper is provided, bpf_lwt_push_encap, which isavailable from the LWT BPF IN hook, but not from the seg6local BPF one.This helper allows to encapsulate a Segment Routing Header (either witha new outer IPv6 header, or by inlining it directly in the existing IPv6header) into a non-SRv6 packet. This helper is required if we want tooffer the possibility to dynamically encapsulate a SRH for non-SRv6 packet,as the BPF seg6local hook only works on traffic already containing a SRH.This is the BPF equivalent of the seg6 LWT infrastructure, which achievesthe same purpose but with a static SRH per route.These helpers require CONFIG_IPV6=y (and not =m).Signed-off-by: Mathieu Xhonneux Acked-by: David Lebrun Signed-off-by: Daniel Borkmann List of files: /linux-6.15/net/ipv6/Kconfig

a9f71d0d - trivial: fix inconsistent help texts

Mon, 07 May 2018 12:03:18 +0000

trivial: fix inconsistent help textsThis patch removes "experimental" from the help text where depends onCONFIG_EXPERIMENTAL was already removed.Signed-off-by: Georg Hofmann Signed-off-by: David S. Miller List of files: /linux-6.15/net/ipv6/Kconfig

6853f21f - ipmr,ipmr6: Define a uniform vif_device

Wed, 28 Feb 2018 21:29:29 +0000

ipmr,ipmr6: Define a uniform vif_deviceThe two implementations have almost identical structures - vif_device andmif_device. As a step toward uniforming the mr_tables, eliminate themif_device and relocate the vif_device definition into a new commonheader file.Also, introduce a common initializing function for setting most of thevif_device fields in a new common source file. This requires modifyingthe ipv{4,6] Kconfig and ipv4 makefile as we're introducing a new commonconfig option - CONFIG_IP_MROUTE_COMMON.Signed-off-by: Yuval Mintz Acked-by: Nikolay Aleksandrov Signed-off-by: David S. Miller List of files: /linux-6.15/net/ipv6/Kconfig