tree 8f7750f6065dcb5d2bd727174fb9f4e3cd8fccf3
parent 1e2bd517c108816220f262d7954b697af03b5f9c
author Paul Moore <pmoore@redhat.com> 1369812985 +0000
committer David S. Miller <davem@davemloft.net> 1370046607 -0700

xfrm: force a garbage collection after deleting a policy

In some cases after deleting a policy from the SPD the policy would
remain in the dst/flow/route cache for an extended period of time
which caused problems for SELinux as its dynamic network access
controls key off of the number of XFRM policy and state entries.
This patch corrects this problem by forcing a XFRM garbage collection
whenever a policy is sucessfully removed.

Reported-by: Ondrej Moris <omoris@redhat.com>
Signed-off-by: Paul Moore <pmoore@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>