[Swan-commit] Changes to ref refs/heads/master
Paul Wouters
paul at vault.libreswan.fi
Wed Jun 26 22:51:25 UTC 2019
New commits:
commit f51e2fcb2779bb42d6337e99e31c9d67ec999be1
Author: Paul Wouters <pwouters at redhat.com>
Date: Wed Jun 26 18:50:55 2019 -0400
testing: updated linux-audit tests
commit 86d0b9ca48db986772e15b838fad55ce8b2453cd
Author: Paul Wouters <pwouters at redhat.com>
Date: Wed Jun 26 18:47:39 2019 -0400
pluto: Check if IPsec SA was real before audit logging destruction
Since some callers move the state to STATE_CHILDSA_DEL, the usual macros
like IS_IPSEC_SA_ESTABLISHED() cannot be used. There isn't a good other
way (skeyseed is already calculated on some errors), so we use a hacky
way of checking via (st_esp.present || st_ah.present) to see if this was
a functional IPsec SA that deserves a destroy audit log message.
More information about the Swan-commit
mailing list