Changes in Kconfig

ffa79484 - xfrm: config: add CONFIG_XFRM_IPTFS

Thu, 14 Nov 2024 07:06:58 +0000

xfrm: config: add CONFIG_XFRM_IPTFSAdd new Kconfig option to enable IP-TFS (RFC9347) functionality.Signed-off-by: Christian Hopps Tested-by: Antony Antony Signed-off-by: Steffen Klassert List of files: /linux-6.15/net/xfrm/Kconfig

29b49013 - ipsec: Select CRYPTO_AEAD

Wed, 20 Sep 2023 23:20:25 +0000

ipsec: Select CRYPTO_AEADSelect CRYPTO_AEAD so that crypto_has_aead is available.Fixes: 1383e2ab102c ("ipsec: Stop using crypto_has_alg")Reported-by: kernel test robot Closes: https://lore.kernel.org/oe-kbuild-all/202309202112.33V1Ezb1-lkp@intel.com/Signed-off-by: Herbert Xu List of files: /linux-6.15/net/xfrm/Kconfig

5106f4a8 - xfrm/compat: Add 32=>64-bit messages translator

Mon, 21 Sep 2020 14:36:55 +0000

xfrm/compat: Add 32=>64-bit messages translatorProvide the user-to-kernel translator under XFRM_USER_COMPAT, thatcreates for 32-bit xfrm-user message a 64-bit translation.The translation is afterwards reused by xfrm_user code just as ifuserspace had sent 64-bit message.Signed-off-by: Dmitry Safonov Signed-off-by: Steffen Klassert List of files: /linux-6.15/net/xfrm/Kconfig

c9e7c76d - xfrm: Provide API to register translator module

Mon, 21 Sep 2020 14:36:51 +0000

xfrm: Provide API to register translator moduleAdd a skeleton for xfrm_compat module and provide API to register it inxfrm_state.ko. struct xfrm_translator will have function pointers totranslate messages received from 32-bit userspace or to be sent to itfrom 64-bit kernel.module_get()/module_put() are used instead of rcu_read_lock() as themodule will vmalloc() memory for translation.The new API is registered with xfrm_state module, not with xfrm_user asthe former needs translator for user_policy set by setsockopt() andxfrm_user already uses functions from xfrm_state.Signed-off-by: Dmitry Safonov Signed-off-by: Steffen Klassert List of files: /linux-6.15/net/xfrm/Kconfig

be013698 - esp, ah: modernize the crypto algorithm selections

Wed, 10 Jun 2020 16:14:37 +0000

esp, ah: modernize the crypto algorithm selectionsThe crypto algorithms selected by the ESP and AH kconfig options areout-of-date with the guidance of RFC 8221, which lists the legacyalgorithms MD5 and DES as "MUST NOT" be implemented, and some moremodern algorithms like AES-GCM and HMAC-SHA256 as "MUST" be implemented.But the options select the legacy algorithms, not the modern ones.Therefore, modify these options to select the MUST algorithms --and *only* the MUST algorithms.Also improve the help text.Note that other algorithms may still be explicitly enabled in thekconfig, and the choice of which to actually use is still controlled byuserspace. This change only modifies the list of algorithms for whichkernel support is guaranteed to be present.Suggested-by: Herbert Xu Suggested-by: Steffen Klassert Acked-by: Herbert Xu Cc: Corentin Labbe Cc: Greg Kroah-Hartman Signed-off-by: Eric Biggers Signed-off-by: Steffen Klassert List of files: /linux-6.15/net/xfrm/Kconfig

37ea0f18 - esp: select CRYPTO_SEQIV

Wed, 10 Jun 2020 16:14:36 +0000

esp: select CRYPTO_SEQIVCommit f23efcbcc523 ("crypto: ctr - no longer needs CRYPTO_SEQIV") madeCRYPTO_CTR stop selecting CRYPTO_SEQIV. This breaks IPsec for mostusers since GCM and several other encryption algorithms require "seqiv"-- and RFC 8221 lists AES-GCM as "MUST" be implemented.Just make XFRM_ESP select CRYPTO_SEQIV.Fixes: f23efcbcc523 ("crypto: ctr - no longer needs CRYPTO_SEQIV")Acked-by: Herbert Xu Cc: Corentin Labbe Cc: Greg Kroah-Hartman Cc: Steffen Klassert Signed-off-by: Eric Biggers Signed-off-by: Steffen Klassert List of files: /linux-6.15/net/xfrm/Kconfig

7d4e3919 - esp, ah: consolidate the crypto algorithm selections

Wed, 10 Jun 2020 16:14:35 +0000

esp, ah: consolidate the crypto algorithm selectionsInstead of duplicating the algorithm selections between INET_AH andINET6_AH and between INET_ESP and INET6_ESP, create new tristatesXFRM_AH and XFRM_ESP that do the algorithm selections, and make these beselected by the corresponding INET* options.Suggested-by: Herbert Xu Acked-by: Herbert Xu Cc: Corentin Labbe Cc: Greg Kroah-Hartman Cc: Steffen Klassert Signed-off-by: Eric Biggers Signed-off-by: Steffen Klassert List of files: /linux-6.15/net/xfrm/Kconfig

a7f7f624 - treewide: replace '---help---' in Kconfig files with 'help'

Sat, 13 Jun 2020 16:50:22 +0000

treewide: replace '---help---' in Kconfig files with 'help'Since commit 84af7a6194e4 ("checkpatch: kconfig: prefer 'help' over'---help---'"), the number of '---help---' has been graduallydecreasing, but there are still more than 2400 instances.This commit finishes the conversion. While I touched the lines,I also fixed the indentation.There are a variety of indentation styles found. a) 4 spaces + '---help---' b) 7 spaces + '---help---' c) 8 spaces + '---help---' d) 1 space + 1 tab + '---help---' e) 1 tab + '---help---' (correct indentation) f) 1 tab + 1 space + '---help---' g) 1 tab + 2 spaces + '---help---'In order to convert all of them to 1 tab + 'help', I ran thefollowing commend: $ find . -name 'Kconfig*' | xargs sed -i 's/^[[:space:]]*---help---/\thelp/'Signed-off-by: Masahiro Yamada List of files: /linux-6.15/net/xfrm/Kconfig

26333c37 - xfrm: add IPv6 support for espintcp

Mon, 27 Apr 2020 15:59:35 +0000

xfrm: add IPv6 support for espintcpThis extends espintcp to support IPv6, building on the existing codeand the new UDPv6 encapsulation support. Most of the code is eitherreused directly (stream parser, ULP) or very similar to the IPv4variant (net/ipv6/esp6.c changes).The separation of config options for IPv4 and IPv6 espintcp requires abit of Kconfig gymnastics to enable the core code.Signed-off-by: Sabrina Dubroca Signed-off-by: Steffen Klassert List of files: /linux-6.15/net/xfrm/Kconfig

43da1411 - net: Fix Kconfig indentation, continued

Thu, 21 Nov 2019 13:28:35 +0000

net: Fix Kconfig indentation, continuedAdjust indentation from spaces to tab (+optional two spaces) as incoding style. This fixes various indentation mixups (seven spaces,tab+one space, etc).Signed-off-by: Krzysztof Kozlowski Signed-off-by: David S. Miller List of files: /linux-6.15/net/xfrm/Kconfig

b95bba5d - crypto: skcipher - rename the crypto_blkcipher module and kconfig option

Fri, 25 Oct 2019 19:41:13 +0000

crypto: skcipher - rename the crypto_blkcipher module and kconfig optionNow that the blkcipher algorithm type has been removed in favor ofskcipher, rename the crypto_blkcipher kernel module to crypto_skcipher,and rename the config options accordingly: CONFIG_CRYPTO_BLKCIPHER => CONFIG_CRYPTO_SKCIPHER CONFIG_CRYPTO_BLKCIPHER2 => CONFIG_CRYPTO_SKCIPHER2Signed-off-by: Eric Biggers Signed-off-by: Herbert Xu List of files: /linux-6.15/net/xfrm/Kconfig

597179b0 - ipsec: select crypto ciphers for xfrm_algo

Tue, 18 Jun 2019 11:22:13 +0000

ipsec: select crypto ciphers for xfrm_algokernelci.org reports failed builds on arc because of what lookslike an old missed 'select' statement:net/xfrm/xfrm_algo.o: In function `xfrm_probe_algs':xfrm_algo.c:(.text+0x1e8): undefined reference to `crypto_has_ahash'I don't see this in randconfig builds on other architectures, butit's fairly clear we want to select the hash code for it, like wedo for all its other users. As Herbert points out, CRYPTO_BLKCIPHERis also required even though it has not popped up in build tests.Fixes: 17bc19702221 ("ipsec: Use skcipher and ahash when probing algorithms")Signed-off-by: Arnd Bergmann Acked-by: Herbert Xu Signed-off-by: Steffen Klassert List of files: /linux-6.15/net/xfrm/Kconfig

ec8f24b7 - treewide: Add SPDX license identifier - Makefile/Kconfig

Sun, 19 May 2019 12:07:45 +0000

treewide: Add SPDX license identifier - Makefile/KconfigAdd SPDX license identifiers to all Make/Kconfig files which: - Have no license information of any formThese files fall under the project license, GPL v2 only. The resulting SPDXlicense identifier is: GPL-2.0-onlySigned-off-by: Thomas Gleixner Signed-off-by: Greg Kroah-Hartman List of files: /linux-6.15/net/xfrm/Kconfig

e54d1527 - xfrm: kconfig: make xfrm depend on inet

Fri, 12 Apr 2019 08:14:46 +0000

xfrm: kconfig: make xfrm depend on inetwhen CONFIG_INET is not enabled:net/xfrm/xfrm_output.c: In function ‘xfrm4_tunnel_encap_add’:net/xfrm/xfrm_output.c:234:2: error: implicit declaration of function ‘ip_select_ident’ [-Werror=implicit-function-declaration]ip_select_ident(dev_net(dst->dev), skb, NULL);XFRM only supports ipv4 and ipv6 so change dependency to INET and placeuser-visible options (pfkey sockets, migrate support and the like)under 'if INET' guard as well.Fixes: 1de70830066b7 ("xfrm: remove output2 indirection from xfrm_mode")Reported-by: Randy Dunlap Signed-off-by: Florian Westphal Acked-by: Randy Dunlap Signed-off-by: Steffen Klassert List of files: /linux-6.15/net/xfrm/Kconfig

a84e3f53 - xfrm: prefer secpath_set over secpath_dup

Tue, 18 Dec 2018 16:15:26 +0000

xfrm: prefer secpath_set over secpath_dupsecpath_set is a wrapper for secpath_dup that will not performan allocation if the secpath attached to the skb has a reference countof one, i.e., it doesn't need to be COW'ed.Also, secpath_dup doesn't attach the secpath to the skb, it leavesthis to the caller.Use secpath_set in places that immediately assign the return value toskb.This allows to remove skb->sp without touching these spots again.secpath_dup can eventually be removed in followup patch.Signed-off-by: Florian Westphal Signed-off-by: David S. Miller List of files: /linux-6.15/net/xfrm/Kconfig

48e01e00 - ixgbe/ixgbevf: fix XFRM_ALGO dependency

Thu, 18 Oct 2018 22:39:43 +0000

ixgbe/ixgbevf: fix XFRM_ALGO dependencyBased on the original work from Arnd Bergmann.When XFRM_ALGO is not enabled, the new ixgbe IPsec code produces alink error:drivers/net/ethernet/intel/ixgbe/ixgbe_ipsec.o: In function `ixgbe_ipsec_vf_add_sa':ixgbe_ipsec.c:(.text+0x1266): undefined reference to `xfrm_aead_get_byname'Simply selecting XFRM_ALGO from here causes circular dependencies, soto fix it, we probably want this slightly more complex solution that issimilar to what other drivers with XFRM offload do:A separate Kconfig symbol now controls whether we include the IPsecoffload code. To keep the old behavior, this is left as 'default y'. Thedependency in XFRM_OFFLOAD still causes a circular dependency but isnot actually needed because this symbol is not user visible, so removingthat dependency on top makes it all work.CC: Arnd Bergmann CC: Shannon Nelson Fixes: eda0333ac293 ("ixgbe: add VF IPsec management")Signed-off-by: Jeff Kirsher Tested-by: Andrew Bowers List of files: /linux-6.15/net/xfrm/Kconfig

2e13b580 - xfrm: remove blank lines at EOF

Tue, 24 Jul 2018 19:29:06 +0000

xfrm: remove blank lines at EOFSigned-off-by: Stephen Hemminger Signed-off-by: David S. Miller List of files: /linux-6.15/net/xfrm/Kconfig

f203b76d - xfrm: Add virtual xfrm interfaces

Tue, 12 Jun 2018 12:07:12 +0000

xfrm: Add virtual xfrm interfacesThis patch adds support for virtual xfrm interfaces.Packets that are routed through such an interfaceare guaranteed to be IPsec transformed or dropped.It is a generic virtual interface that ensures IPsectransformation, no need to know what happens behindthe interface. This means that we can tunnel IPv4 andIPv6 through the same interface and support all xfrmmodes (tunnel, transport and beet) on it.Co-developed-by: Lorenzo Colitti Co-developed-by: Benedict Wong Signed-off-by: Lorenzo Colitti Signed-off-by: Benedict Wong Signed-off-by: Steffen Klassert Acked-by: Shannon Nelson Tested-by: Benedict Wong Tested-by: Antony Antony Reviewed-by: Eyal Birger List of files: /linux-6.15/net/xfrm/Kconfig

25393d3f - net: Prepare gro for packet consuming gro callbacks

Wed, 15 Feb 2017 08:39:44 +0000

net: Prepare gro for packet consuming gro callbacksThe upcomming IPsec ESP gro callbacks will consume the skb,so prepare for that.Signed-off-by: Steffen Klassert List of files: /linux-6.15/net/xfrm/Kconfig

97e219b7 - gro_cells: move to net/core/gro_cells.c

Tue, 07 Feb 2017 23:37:15 +0000

gro_cells: move to net/core/gro_cells.cWe have many gro cells users, so lets move the code to avoidduplication.This creates a CONFIG_GRO_CELLS option.Signed-off-by: Eric Dumazet Signed-off-by: David S. Miller List of files: /linux-6.15/net/xfrm/Kconfig