/* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */

[0] Fix | Delete

#ifndef _LINUX_XFRM_H

[1] Fix | Delete

#define _LINUX_XFRM_H

[2] Fix | Delete

[3] Fix | Delete

#include <linux/in6.h>

[4] Fix | Delete

#include <linux/types.h>

[5] Fix | Delete

[6] Fix | Delete

/* All of the structures in this file may not change size as they are

[7] Fix | Delete

* passed into the kernel from userspace via netlink sockets.

[8] Fix | Delete

*/

[9] Fix | Delete

[10] Fix | Delete

/* Structure to encapsulate addresses. I do not want to use

[11] Fix | Delete

* "standard" structure. My apologies.

[12] Fix | Delete

*/

[13] Fix | Delete

typedef union {

[14] Fix | Delete

__be32 a4;

[15] Fix | Delete

__be32 a6[4];

[16] Fix | Delete

struct in6_addr in6;

[17] Fix | Delete

} xfrm_address_t;

[18] Fix | Delete

[19] Fix | Delete

/* Ident of a specific xfrm_state. It is used on input to lookup

[20] Fix | Delete

* the state by (spi,daddr,ah/esp) or to store information about

[21] Fix | Delete

* spi, protocol and tunnel address on output.

[22] Fix | Delete

*/

[23] Fix | Delete

struct xfrm_id {

[24] Fix | Delete

xfrm_address_t daddr;

[25] Fix | Delete

__be32 spi;

[26] Fix | Delete

__u8 proto;

[27] Fix | Delete

};

[28] Fix | Delete

[29] Fix | Delete

struct xfrm_sec_ctx {

[30] Fix | Delete

__u8 ctx_doi;

[31] Fix | Delete

__u8 ctx_alg;

[32] Fix | Delete

__u16 ctx_len;

[33] Fix | Delete

__u32 ctx_sid;

[34] Fix | Delete

char ctx_str[0];

[35] Fix | Delete

};

[36] Fix | Delete

[37] Fix | Delete

/* Security Context Domains of Interpretation */

[38] Fix | Delete

#define XFRM_SC_DOI_RESERVED 0

[39] Fix | Delete

#define XFRM_SC_DOI_LSM 1

[40] Fix | Delete

[41] Fix | Delete

/* Security Context Algorithms */

[42] Fix | Delete

#define XFRM_SC_ALG_RESERVED 0

[43] Fix | Delete

#define XFRM_SC_ALG_SELINUX 1

[44] Fix | Delete

[45] Fix | Delete

/* Selector, used as selector both on policy rules (SPD) and SAs. */

[46] Fix | Delete

[47] Fix | Delete

struct xfrm_selector {

[48] Fix | Delete

xfrm_address_t daddr;

[49] Fix | Delete

xfrm_address_t saddr;

[50] Fix | Delete

__be16 dport;

[51] Fix | Delete

__be16 dport_mask;

[52] Fix | Delete

__be16 sport;

[53] Fix | Delete

__be16 sport_mask;

[54] Fix | Delete

__u16 family;

[55] Fix | Delete

__u8 prefixlen_d;

[56] Fix | Delete

__u8 prefixlen_s;

[57] Fix | Delete

__u8 proto;

[58] Fix | Delete

int ifindex;

[59] Fix | Delete

__kernel_uid32_t user;

[60] Fix | Delete

};

[61] Fix | Delete

[62] Fix | Delete

#define XFRM_INF (~(__u64)0)

[63] Fix | Delete

[64] Fix | Delete

struct xfrm_lifetime_cfg {

[65] Fix | Delete

__u64 soft_byte_limit;

[66] Fix | Delete

__u64 hard_byte_limit;

[67] Fix | Delete

__u64 soft_packet_limit;

[68] Fix | Delete

__u64 hard_packet_limit;

[69] Fix | Delete

__u64 soft_add_expires_seconds;

[70] Fix | Delete

__u64 hard_add_expires_seconds;

[71] Fix | Delete

__u64 soft_use_expires_seconds;

[72] Fix | Delete

__u64 hard_use_expires_seconds;

[73] Fix | Delete

};

[74] Fix | Delete

[75] Fix | Delete

struct xfrm_lifetime_cur {

[76] Fix | Delete

__u64 bytes;

[77] Fix | Delete

__u64 packets;

[78] Fix | Delete

__u64 add_time;

[79] Fix | Delete

__u64 use_time;

[80] Fix | Delete

};

[81] Fix | Delete

[82] Fix | Delete

struct xfrm_replay_state {

[83] Fix | Delete

__u32 oseq;

[84] Fix | Delete

__u32 seq;

[85] Fix | Delete

__u32 bitmap;

[86] Fix | Delete

};

[87] Fix | Delete

[88] Fix | Delete

#define XFRMA_REPLAY_ESN_MAX 4096

[89] Fix | Delete

[90] Fix | Delete

struct xfrm_replay_state_esn {

[91] Fix | Delete

unsigned int bmp_len;

[92] Fix | Delete

__u32 oseq;

[93] Fix | Delete

__u32 seq;

[94] Fix | Delete

__u32 oseq_hi;

[95] Fix | Delete

__u32 seq_hi;

[96] Fix | Delete

__u32 replay_window;

[97] Fix | Delete

__u32 bmp[0];

[98] Fix | Delete

};

[99] Fix | Delete

[100] Fix | Delete

struct xfrm_algo {

[101] Fix | Delete

char alg_name[64];

[102] Fix | Delete

unsigned int alg_key_len; /* in bits */

[103] Fix | Delete

char alg_key[0];

[104] Fix | Delete

};

[105] Fix | Delete

[106] Fix | Delete

struct xfrm_algo_auth {

[107] Fix | Delete

char alg_name[64];

[108] Fix | Delete

unsigned int alg_key_len; /* in bits */

[109] Fix | Delete

unsigned int alg_trunc_len; /* in bits */

[110] Fix | Delete

char alg_key[0];

[111] Fix | Delete

};

[112] Fix | Delete

[113] Fix | Delete

struct xfrm_algo_aead {

[114] Fix | Delete

char alg_name[64];

[115] Fix | Delete

unsigned int alg_key_len; /* in bits */

[116] Fix | Delete

unsigned int alg_icv_len; /* in bits */

[117] Fix | Delete

char alg_key[0];

[118] Fix | Delete

};

[119] Fix | Delete

[120] Fix | Delete

struct xfrm_stats {

[121] Fix | Delete

__u32 replay_window;

[122] Fix | Delete

__u32 replay;

[123] Fix | Delete

__u32 integrity_failed;

[124] Fix | Delete

};

[125] Fix | Delete

[126] Fix | Delete

enum {

[127] Fix | Delete

XFRM_POLICY_TYPE_MAIN = 0,

[128] Fix | Delete

XFRM_POLICY_TYPE_SUB = 1,

[129] Fix | Delete

XFRM_POLICY_TYPE_MAX = 2,

[130] Fix | Delete

XFRM_POLICY_TYPE_ANY = 255

[131] Fix | Delete

};

[132] Fix | Delete

[133] Fix | Delete

enum {

[134] Fix | Delete

XFRM_POLICY_IN = 0,

[135] Fix | Delete

XFRM_POLICY_OUT = 1,

[136] Fix | Delete

XFRM_POLICY_FWD = 2,

[137] Fix | Delete

XFRM_POLICY_MASK = 3,

[138] Fix | Delete

XFRM_POLICY_MAX = 3

[139] Fix | Delete

};

[140] Fix | Delete

[141] Fix | Delete

enum {

[142] Fix | Delete

XFRM_SHARE_ANY, /* No limitations */

[143] Fix | Delete

XFRM_SHARE_SESSION, /* For this session only */

[144] Fix | Delete

XFRM_SHARE_USER, /* For this user only */

[145] Fix | Delete

XFRM_SHARE_UNIQUE /* Use once */

[146] Fix | Delete

};

[147] Fix | Delete

[148] Fix | Delete

#define XFRM_MODE_TRANSPORT 0

[149] Fix | Delete

#define XFRM_MODE_TUNNEL 1

[150] Fix | Delete

#define XFRM_MODE_ROUTEOPTIMIZATION 2

[151] Fix | Delete

#define XFRM_MODE_IN_TRIGGER 3

[152] Fix | Delete

#define XFRM_MODE_BEET 4

[153] Fix | Delete

#define XFRM_MODE_MAX 5

[154] Fix | Delete

[155] Fix | Delete

/* Netlink configuration messages. */

[156] Fix | Delete

enum {

[157] Fix | Delete

XFRM_MSG_BASE = 0x10,

[158] Fix | Delete

[159] Fix | Delete

XFRM_MSG_NEWSA = 0x10,

[160] Fix | Delete

#define XFRM_MSG_NEWSA XFRM_MSG_NEWSA

[161] Fix | Delete

XFRM_MSG_DELSA,

[162] Fix | Delete

#define XFRM_MSG_DELSA XFRM_MSG_DELSA

[163] Fix | Delete

XFRM_MSG_GETSA,

[164] Fix | Delete

#define XFRM_MSG_GETSA XFRM_MSG_GETSA

[165] Fix | Delete

[166] Fix | Delete

XFRM_MSG_NEWPOLICY,

[167] Fix | Delete

#define XFRM_MSG_NEWPOLICY XFRM_MSG_NEWPOLICY

[168] Fix | Delete

XFRM_MSG_DELPOLICY,

[169] Fix | Delete

#define XFRM_MSG_DELPOLICY XFRM_MSG_DELPOLICY

[170] Fix | Delete

XFRM_MSG_GETPOLICY,

[171] Fix | Delete

#define XFRM_MSG_GETPOLICY XFRM_MSG_GETPOLICY

[172] Fix | Delete

[173] Fix | Delete

XFRM_MSG_ALLOCSPI,

[174] Fix | Delete

#define XFRM_MSG_ALLOCSPI XFRM_MSG_ALLOCSPI

[175] Fix | Delete

XFRM_MSG_ACQUIRE,

[176] Fix | Delete

#define XFRM_MSG_ACQUIRE XFRM_MSG_ACQUIRE

[177] Fix | Delete

XFRM_MSG_EXPIRE,

[178] Fix | Delete

#define XFRM_MSG_EXPIRE XFRM_MSG_EXPIRE

[179] Fix | Delete

[180] Fix | Delete

XFRM_MSG_UPDPOLICY,

[181] Fix | Delete

#define XFRM_MSG_UPDPOLICY XFRM_MSG_UPDPOLICY

[182] Fix | Delete

XFRM_MSG_UPDSA,

[183] Fix | Delete

#define XFRM_MSG_UPDSA XFRM_MSG_UPDSA

[184] Fix | Delete

[185] Fix | Delete

XFRM_MSG_POLEXPIRE,

[186] Fix | Delete

#define XFRM_MSG_POLEXPIRE XFRM_MSG_POLEXPIRE

[187] Fix | Delete

[188] Fix | Delete

XFRM_MSG_FLUSHSA,

[189] Fix | Delete

#define XFRM_MSG_FLUSHSA XFRM_MSG_FLUSHSA

[190] Fix | Delete

XFRM_MSG_FLUSHPOLICY,

[191] Fix | Delete

#define XFRM_MSG_FLUSHPOLICY XFRM_MSG_FLUSHPOLICY

[192] Fix | Delete

[193] Fix | Delete

XFRM_MSG_NEWAE,

[194] Fix | Delete

#define XFRM_MSG_NEWAE XFRM_MSG_NEWAE

[195] Fix | Delete

XFRM_MSG_GETAE,

[196] Fix | Delete

#define XFRM_MSG_GETAE XFRM_MSG_GETAE

[197] Fix | Delete

[198] Fix | Delete

XFRM_MSG_REPORT,

[199] Fix | Delete

#define XFRM_MSG_REPORT XFRM_MSG_REPORT

[200] Fix | Delete

[201] Fix | Delete

XFRM_MSG_MIGRATE,

[202] Fix | Delete

#define XFRM_MSG_MIGRATE XFRM_MSG_MIGRATE

[203] Fix | Delete

[204] Fix | Delete

XFRM_MSG_NEWSADINFO,

[205] Fix | Delete

#define XFRM_MSG_NEWSADINFO XFRM_MSG_NEWSADINFO

[206] Fix | Delete

XFRM_MSG_GETSADINFO,

[207] Fix | Delete

#define XFRM_MSG_GETSADINFO XFRM_MSG_GETSADINFO

[208] Fix | Delete

[209] Fix | Delete

XFRM_MSG_NEWSPDINFO,

[210] Fix | Delete

#define XFRM_MSG_NEWSPDINFO XFRM_MSG_NEWSPDINFO

[211] Fix | Delete

XFRM_MSG_GETSPDINFO,

[212] Fix | Delete

#define XFRM_MSG_GETSPDINFO XFRM_MSG_GETSPDINFO

[213] Fix | Delete

[214] Fix | Delete

XFRM_MSG_MAPPING,

[215] Fix | Delete

#define XFRM_MSG_MAPPING XFRM_MSG_MAPPING

[216] Fix | Delete

__XFRM_MSG_MAX

[217] Fix | Delete

};

[218] Fix | Delete

#define XFRM_MSG_MAX (__XFRM_MSG_MAX - 1)

[219] Fix | Delete

[220] Fix | Delete

#define XFRM_NR_MSGTYPES (XFRM_MSG_MAX + 1 - XFRM_MSG_BASE)

[221] Fix | Delete

[222] Fix | Delete

/*

[223] Fix | Delete

* Generic LSM security context for comunicating to user space

[224] Fix | Delete

* NOTE: Same format as sadb_x_sec_ctx

[225] Fix | Delete

*/

[226] Fix | Delete

struct xfrm_user_sec_ctx {

[227] Fix | Delete

__u16 len;

[228] Fix | Delete

__u16 exttype;

[229] Fix | Delete

__u8 ctx_alg; /* LSMs: e.g., selinux == 1 */

[230] Fix | Delete

__u8 ctx_doi;

[231] Fix | Delete

__u16 ctx_len;

[232] Fix | Delete

};

[233] Fix | Delete

[234] Fix | Delete

struct xfrm_user_tmpl {

[235] Fix | Delete

struct xfrm_id id;

[236] Fix | Delete

__u16 family;

[237] Fix | Delete

xfrm_address_t saddr;

[238] Fix | Delete

__u32 reqid;

[239] Fix | Delete

__u8 mode;

[240] Fix | Delete

__u8 share;

[241] Fix | Delete

__u8 optional;

[242] Fix | Delete

__u32 aalgos;

[243] Fix | Delete

__u32 ealgos;

[244] Fix | Delete

__u32 calgos;

[245] Fix | Delete

};

[246] Fix | Delete

[247] Fix | Delete

struct xfrm_encap_tmpl {

[248] Fix | Delete

__u16 encap_type;

[249] Fix | Delete

__be16 encap_sport;

[250] Fix | Delete

__be16 encap_dport;

[251] Fix | Delete

xfrm_address_t encap_oa;

[252] Fix | Delete

};

[253] Fix | Delete

[254] Fix | Delete

/* AEVENT flags */

[255] Fix | Delete

enum xfrm_ae_ftype_t {

[256] Fix | Delete

XFRM_AE_UNSPEC,

[257] Fix | Delete

XFRM_AE_RTHR=1, /* replay threshold*/

[258] Fix | Delete

XFRM_AE_RVAL=2, /* replay value */

[259] Fix | Delete

XFRM_AE_LVAL=4, /* lifetime value */

[260] Fix | Delete

XFRM_AE_ETHR=8, /* expiry timer threshold */

[261] Fix | Delete

XFRM_AE_CR=16, /* Event cause is replay update */

[262] Fix | Delete

XFRM_AE_CE=32, /* Event cause is timer expiry */

[263] Fix | Delete

XFRM_AE_CU=64, /* Event cause is policy update */

[264] Fix | Delete

__XFRM_AE_MAX

[265] Fix | Delete

[266] Fix | Delete

#define XFRM_AE_MAX (__XFRM_AE_MAX - 1)

[267] Fix | Delete

};

[268] Fix | Delete

[269] Fix | Delete

struct xfrm_userpolicy_type {

[270] Fix | Delete

__u8 type;

[271] Fix | Delete

__u16 reserved1;

[272] Fix | Delete

__u8 reserved2;

[273] Fix | Delete

};

[274] Fix | Delete

[275] Fix | Delete

/* Netlink message attributes. */

[276] Fix | Delete

enum xfrm_attr_type_t {

[277] Fix | Delete

XFRMA_UNSPEC,

[278] Fix | Delete

XFRMA_ALG_AUTH, /* struct xfrm_algo */

[279] Fix | Delete

XFRMA_ALG_CRYPT, /* struct xfrm_algo */

[280] Fix | Delete

XFRMA_ALG_COMP, /* struct xfrm_algo */

[281] Fix | Delete

XFRMA_ENCAP, /* struct xfrm_algo + struct xfrm_encap_tmpl */

[282] Fix | Delete

XFRMA_TMPL, /* 1 or more struct xfrm_user_tmpl */

[283] Fix | Delete

XFRMA_SA, /* struct xfrm_usersa_info */

[284] Fix | Delete

XFRMA_POLICY, /*struct xfrm_userpolicy_info */

[285] Fix | Delete

XFRMA_SEC_CTX, /* struct xfrm_sec_ctx */

[286] Fix | Delete

XFRMA_LTIME_VAL,

[287] Fix | Delete

XFRMA_REPLAY_VAL,

[288] Fix | Delete

XFRMA_REPLAY_THRESH,

[289] Fix | Delete

XFRMA_ETIMER_THRESH,

[290] Fix | Delete

XFRMA_SRCADDR, /* xfrm_address_t */

[291] Fix | Delete

XFRMA_COADDR, /* xfrm_address_t */

[292] Fix | Delete

XFRMA_LASTUSED, /* unsigned long */

[293] Fix | Delete

XFRMA_POLICY_TYPE, /* struct xfrm_userpolicy_type */

[294] Fix | Delete

XFRMA_MIGRATE,

[295] Fix | Delete

XFRMA_ALG_AEAD, /* struct xfrm_algo_aead */

[296] Fix | Delete

XFRMA_KMADDRESS, /* struct xfrm_user_kmaddress */

[297] Fix | Delete

XFRMA_ALG_AUTH_TRUNC, /* struct xfrm_algo_auth */

[298] Fix | Delete

XFRMA_MARK, /* struct xfrm_mark */

[299] Fix | Delete

XFRMA_TFCPAD, /* __u32 */

[300] Fix | Delete

XFRMA_REPLAY_ESN_VAL, /* struct xfrm_replay_state_esn */

[301] Fix | Delete

XFRMA_SA_EXTRA_FLAGS, /* __u32 */

[302] Fix | Delete

XFRMA_PROTO, /* __u8 */

[303] Fix | Delete

XFRMA_ADDRESS_FILTER, /* struct xfrm_address_filter */

[304] Fix | Delete

XFRMA_PAD,

[305] Fix | Delete

XFRMA_OFFLOAD_DEV, /* struct xfrm_user_offload */

[306] Fix | Delete

XFRMA_SET_MARK, /* __u32 */

[307] Fix | Delete

XFRMA_SET_MARK_MASK, /* __u32 */

[308] Fix | Delete

XFRMA_IF_ID, /* __u32 */

[309] Fix | Delete

__XFRMA_MAX

[310] Fix | Delete

[311] Fix | Delete

#define XFRMA_OUTPUT_MARK XFRMA_SET_MARK /* Compatibility */

[312] Fix | Delete

#define XFRMA_MAX (__XFRMA_MAX - 1)

[313] Fix | Delete

};

[314] Fix | Delete

[315] Fix | Delete

struct xfrm_mark {

[316] Fix | Delete

__u32 v; /* value */

[317] Fix | Delete

__u32 m; /* mask */

[318] Fix | Delete

};

[319] Fix | Delete

[320] Fix | Delete

enum xfrm_sadattr_type_t {

[321] Fix | Delete

XFRMA_SAD_UNSPEC,

[322] Fix | Delete

XFRMA_SAD_CNT,

[323] Fix | Delete

XFRMA_SAD_HINFO,

[324] Fix | Delete

__XFRMA_SAD_MAX

[325] Fix | Delete

[326] Fix | Delete

#define XFRMA_SAD_MAX (__XFRMA_SAD_MAX - 1)

[327] Fix | Delete

};

[328] Fix | Delete

[329] Fix | Delete

struct xfrmu_sadhinfo {

[330] Fix | Delete

__u32 sadhcnt; /* current hash bkts */

[331] Fix | Delete

__u32 sadhmcnt; /* max allowed hash bkts */

[332] Fix | Delete

};

[333] Fix | Delete

[334] Fix | Delete

enum xfrm_spdattr_type_t {

[335] Fix | Delete

XFRMA_SPD_UNSPEC,

[336] Fix | Delete

XFRMA_SPD_INFO,

[337] Fix | Delete

XFRMA_SPD_HINFO,

[338] Fix | Delete

XFRMA_SPD_IPV4_HTHRESH,

[339] Fix | Delete

XFRMA_SPD_IPV6_HTHRESH,

[340] Fix | Delete

__XFRMA_SPD_MAX

[341] Fix | Delete

[342] Fix | Delete

#define XFRMA_SPD_MAX (__XFRMA_SPD_MAX - 1)

[343] Fix | Delete

};

[344] Fix | Delete

[345] Fix | Delete

struct xfrmu_spdinfo {

[346] Fix | Delete

__u32 incnt;

[347] Fix | Delete

__u32 outcnt;

[348] Fix | Delete

__u32 fwdcnt;

[349] Fix | Delete

__u32 inscnt;

[350] Fix | Delete

__u32 outscnt;

[351] Fix | Delete

__u32 fwdscnt;

[352] Fix | Delete

};

[353] Fix | Delete

[354] Fix | Delete

struct xfrmu_spdhinfo {

[355] Fix | Delete

__u32 spdhcnt;

[356] Fix | Delete

__u32 spdhmcnt;

[357] Fix | Delete

};

[358] Fix | Delete

[359] Fix | Delete

struct xfrmu_spdhthresh {

[360] Fix | Delete

__u8 lbits;

[361] Fix | Delete

__u8 rbits;

[362] Fix | Delete

};

[363] Fix | Delete

[364] Fix | Delete

struct xfrm_usersa_info {

[365] Fix | Delete

struct xfrm_selector sel;

[366] Fix | Delete

struct xfrm_id id;

[367] Fix | Delete

xfrm_address_t saddr;

[368] Fix | Delete

struct xfrm_lifetime_cfg lft;

[369] Fix | Delete

struct xfrm_lifetime_cur curlft;

[370] Fix | Delete

struct xfrm_stats stats;

[371] Fix | Delete

__u32 seq;

[372] Fix | Delete

__u32 reqid;

[373] Fix | Delete

__u16 family;

[374] Fix | Delete

__u8 mode; /* XFRM_MODE_xxx */

[375] Fix | Delete

__u8 replay_window;

[376] Fix | Delete

__u8 flags;

[377] Fix | Delete

#define XFRM_STATE_NOECN 1

[378] Fix | Delete

#define XFRM_STATE_DECAP_DSCP 2

[379] Fix | Delete

#define XFRM_STATE_NOPMTUDISC 4

[380] Fix | Delete

#define XFRM_STATE_WILDRECV 8

[381] Fix | Delete

#define XFRM_STATE_ICMP 16

[382] Fix | Delete

#define XFRM_STATE_AF_UNSPEC 32

[383] Fix | Delete

#define XFRM_STATE_ALIGN4 64

[384] Fix | Delete

#define XFRM_STATE_ESN 128

[385] Fix | Delete

};

[386] Fix | Delete

[387] Fix | Delete

#define XFRM_SA_XFLAG_DONT_ENCAP_DSCP 1

[388] Fix | Delete

[389] Fix | Delete

struct xfrm_usersa_id {

[390] Fix | Delete

xfrm_address_t daddr;

[391] Fix | Delete

__be32 spi;

[392] Fix | Delete

__u16 family;

[393] Fix | Delete

__u8 proto;

[394] Fix | Delete

};

[395] Fix | Delete

[396] Fix | Delete

struct xfrm_aevent_id {

[397] Fix | Delete

struct xfrm_usersa_id sa_id;

[398] Fix | Delete

xfrm_address_t saddr;

[399] Fix | Delete

__u32 flags;

[400] Fix | Delete

__u32 reqid;

[401] Fix | Delete

};

[402] Fix | Delete

[403] Fix | Delete

struct xfrm_userspi_info {

[404] Fix | Delete

struct xfrm_usersa_info info;

[405] Fix | Delete

__u32 min;

[406] Fix | Delete

__u32 max;

[407] Fix | Delete

};

[408] Fix | Delete

[409] Fix | Delete

struct xfrm_userpolicy_info {

[410] Fix | Delete

struct xfrm_selector sel;

[411] Fix | Delete

struct xfrm_lifetime_cfg lft;

[412] Fix | Delete

struct xfrm_lifetime_cur curlft;

[413] Fix | Delete

__u32 priority;

[414] Fix | Delete

__u32 index;

[415] Fix | Delete

__u8 dir;

[416] Fix | Delete

__u8 action;

[417] Fix | Delete

#define XFRM_POLICY_ALLOW 0

[418] Fix | Delete

#define XFRM_POLICY_BLOCK 1

[419] Fix | Delete

__u8 flags;

[420] Fix | Delete

#define XFRM_POLICY_LOCALOK 1 /* Allow user to override global policy */

[421] Fix | Delete

/* Automatically expand selector to include matching ICMP payloads. */

[422] Fix | Delete

#define XFRM_POLICY_ICMP 2

[423] Fix | Delete

__u8 share;

[424] Fix | Delete

};

[425] Fix | Delete

[426] Fix | Delete

struct xfrm_userpolicy_id {

[427] Fix | Delete

struct xfrm_selector sel;

[428] Fix | Delete

__u32 index;

[429] Fix | Delete

__u8 dir;

[430] Fix | Delete

};

[431] Fix | Delete

[432] Fix | Delete

struct xfrm_user_acquire {

[433] Fix | Delete

struct xfrm_id id;

[434] Fix | Delete

xfrm_address_t saddr;

[435] Fix | Delete

struct xfrm_selector sel;

[436] Fix | Delete

struct xfrm_userpolicy_info policy;

[437] Fix | Delete

__u32 aalgos;

[438] Fix | Delete

__u32 ealgos;

[439] Fix | Delete

__u32 calgos;

[440] Fix | Delete

__u32 seq;

[441] Fix | Delete

};

[442] Fix | Delete

[443] Fix | Delete

struct xfrm_user_expire {

[444] Fix | Delete

struct xfrm_usersa_info state;

[445] Fix | Delete

__u8 hard;

[446] Fix | Delete

};

[447] Fix | Delete

[448] Fix | Delete

struct xfrm_user_polexpire {

[449] Fix | Delete

struct xfrm_userpolicy_info pol;

[450] Fix | Delete

__u8 hard;

[451] Fix | Delete

};

[452] Fix | Delete

[453] Fix | Delete

struct xfrm_usersa_flush {

[454] Fix | Delete

__u8 proto;

[455] Fix | Delete

};

[456] Fix | Delete

[457] Fix | Delete

struct xfrm_user_report {

[458] Fix | Delete

__u8 proto;

[459] Fix | Delete

struct xfrm_selector sel;

[460] Fix | Delete

};

[461] Fix | Delete

[462] Fix | Delete

/* Used by MIGRATE to pass addresses IKE should use to perform

[463] Fix | Delete

* SA negotiation with the peer */

[464] Fix | Delete

struct xfrm_user_kmaddress {

[465] Fix | Delete

xfrm_address_t local;

[466] Fix | Delete

xfrm_address_t remote;

[467] Fix | Delete

__u32 reserved;

[468] Fix | Delete

__u16 family;

[469] Fix | Delete

};

[470] Fix | Delete

[471] Fix | Delete

struct xfrm_user_migrate {

[472] Fix | Delete

xfrm_address_t old_daddr;

[473] Fix | Delete

xfrm_address_t old_saddr;

[474] Fix | Delete

xfrm_address_t new_daddr;

[475] Fix | Delete

xfrm_address_t new_saddr;

[476] Fix | Delete

__u8 proto;

[477] Fix | Delete

__u8 mode;

[478] Fix | Delete

__u16 reserved;

[479] Fix | Delete

__u32 reqid;

[480] Fix | Delete

__u16 old_family;

[481] Fix | Delete

__u16 new_family;

[482] Fix | Delete

};

[483] Fix | Delete

[484] Fix | Delete

struct xfrm_user_mapping {

[485] Fix | Delete

struct xfrm_usersa_id id;

[486] Fix | Delete

__u32 reqid;

[487] Fix | Delete

xfrm_address_t old_saddr;

[488] Fix | Delete

xfrm_address_t new_saddr;

[489] Fix | Delete

__be16 old_sport;

[490] Fix | Delete

__be16 new_sport;

[491] Fix | Delete

};

[492] Fix | Delete

[493] Fix | Delete

struct xfrm_address_filter {

[494] Fix | Delete

xfrm_address_t saddr;

[495] Fix | Delete

xfrm_address_t daddr;

[496] Fix | Delete

__u16 family;

[497] Fix | Delete

__u8 splen;

[498] Fix | Delete

__u8 dplen;

[499] Fix | Delete