Re: [PATCH ipsec] xfrm: fix dflt policy check when there is no policy configured

On Mon, Nov 22, 2021 at 11:33:13AM +0100, Nicolas Dichtel wrote:

When there is no policy configured on the system, the default policy is checked in xfrm_route_forward. However, it was done with the wrong direction (XFRM_POLICY_FWD instead of XFRM_POLICY_OUT). The default policy for XFRM_POLICY_FWD was checked just before, with a call to xfrm[46]_policy_check().

CC: stable@vger.kernel.org Fixes: 2d151d39073a ("xfrm: Add possibility to set the default to block if we have no policy") Signed-off-by: Nicolas Dichtel nicolas.dichtel@6wind.com

Applied, thanks Nicolas!