[Swan-commit] Changes to ref refs/heads/master

Paul Wouters paul at vault.libreswan.fi
Wed Jun 26 22:51:25 UTC 2019


New commits:
commit f51e2fcb2779bb42d6337e99e31c9d67ec999be1
Author: Paul Wouters <pwouters at redhat.com>
Date:   Wed Jun 26 18:50:55 2019 -0400

    testing: updated linux-audit tests

commit 86d0b9ca48db986772e15b838fad55ce8b2453cd
Author: Paul Wouters <pwouters at redhat.com>
Date:   Wed Jun 26 18:47:39 2019 -0400

    pluto: Check if IPsec SA was real before audit logging destruction
    
    Since some callers move the state to STATE_CHILDSA_DEL, the usual macros
    like IS_IPSEC_SA_ESTABLISHED() cannot be used. There isn't a good other
    way (skeyseed is already calculated on some errors), so we use a hacky
    way of checking via (st_esp.present || st_ah.present) to see if this was
    a functional IPsec SA that deserves a destroy audit log message.



More information about the Swan-commit mailing list