Just one patch this time:
1) Redact the SA keys with kernel lockdown confidentiality.
If enabled, no secret keys are sent to uuserspace.
From Antony Antony.
Please pull or let me know if there are problems.
Thanks!
The following changes since commit 8be33ecfc1ffd2da20cc29e957e4cb6eb99310cb:
net: skb_vlan_untag(): don't reset transport offset if set by GRO layer
(2020-11-09 20:03:55 -0800)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git master
for you to fetch changes up to c7a5899eb26e2a4d516d53f65b6dd67be2228041:
xfrm: redact SA secret with lockdown confidentiality (2020-11-27 11:03:06
+0100)
----------------------------------------------------------------
Antony Antony (1):
xfrm: redact SA secret with lockdown confidentiality
include/linux/security.h | 1 +
net/xfrm/xfrm_user.c | 74 +++++++++++++++++++++++++++++++++++++++++++-----
security/security.c | 1 +
3 files changed, 69 insertions(+), 7 deletions(-)
