Re: [PATCHv2 ipsec] xfrm: policy: match with both mark and mask on user interfaces

2020-06-25 Thread Steffen Klassert
On Mon, Jun 22, 2020 at 04:40:29PM +0800, Xin Long wrote: > In commit ed17b8d377ea ("xfrm: fix a warning in xfrm_policy_insert_list"), > it would take 'priority' to make a policy unique, and allow duplicated > policies with different 'priority' to be added, which is not expected > by userland, as T

[PATCHv2 ipsec] xfrm: policy: match with both mark and mask on user interfaces

2020-06-22 Thread Xin Long
In commit ed17b8d377ea ("xfrm: fix a warning in xfrm_policy_insert_list"), it would take 'priority' to make a policy unique, and allow duplicated policies with different 'priority' to be added, which is not expected by userland, as Tobias reported in strongswan. To fix this duplicated policies iss