From: Jouni Malinen <j@w1.fi>
To: Johannes Berg <johannes@sipsolutions.net>
Cc: linux-wireless@vger.kernel.org, Jouni Malinen <j@w1.fi>
Subject: [RFC 07/11] mac80211: 802.11w - Configuration of MFP disabled/optional/required
Date: Wed, 31 Dec 2008 17:38:41 +0200 [thread overview]
Message-ID: <20081231154224.895735911@w1.fi> (raw)
In-Reply-To: 20081231153834.840526845@w1.fi
Add new WEXT IW_AUTH_* parameter for setting MFP
disabled/optional/required.
Signed-off-by: Jouni Malinen <j@w1.fi>
---
include/linux/wireless.h | 6 ++++++
net/mac80211/ieee80211_i.h | 6 ++++++
net/mac80211/mlme.c | 4 ++++
net/mac80211/wext.c | 7 +++++++
4 files changed, 23 insertions(+)
--- wireless-testing.orig/include/linux/wireless.h 2008-12-31 17:11:41.000000000 +0200
+++ wireless-testing/include/linux/wireless.h 2008-12-31 17:12:37.000000000 +0200
@@ -578,6 +578,7 @@
#define IW_AUTH_ROAMING_CONTROL 9
#define IW_AUTH_PRIVACY_INVOKED 10
#define IW_AUTH_CIPHER_GROUP_MGMT 11
+#define IW_AUTH_MFP 12
/* IW_AUTH_WPA_VERSION values (bit field) */
#define IW_AUTH_WPA_VERSION_DISABLED 0x00000001
@@ -607,6 +608,11 @@
#define IW_AUTH_ROAMING_DISABLE 1 /* user space program used for roaming
* control */
+/* IW_AUTH_MFP (management frame protection) values */
+#define IW_AUTH_MFP_DISABLED 0 /* MFP disabled */
+#define IW_AUTH_MFP_OPTIONAL 1 /* MFP optional */
+#define IW_AUTH_MFP_REQUIRED 2 /* MFP required */
+
/* SIOCSIWENCODEEXT definitions */
#define IW_ENCODE_SEQ_MAX_SIZE 8
/* struct iw_encode_ext ->alg */
--- wireless-testing.orig/net/mac80211/ieee80211_i.h 2008-12-31 17:04:36.000000000 +0200
+++ wireless-testing/net/mac80211/ieee80211_i.h 2008-12-31 17:12:37.000000000 +0200
@@ -317,6 +317,12 @@ struct ieee80211_if_sta {
int auth_alg; /* currently used IEEE 802.11 authentication algorithm */
int auth_transaction;
+ enum {
+ IEEE80211_MFP_DISABLED,
+ IEEE80211_MFP_OPTIONAL,
+ IEEE80211_MFP_REQUIRED
+ } mfp; /* management frame protection */
+
unsigned long ibss_join_req;
struct sk_buff *probe_resp; /* ProbeResp template for IBSS */
u32 supp_rates_bits[IEEE80211_NUM_BANDS];
--- wireless-testing.orig/net/mac80211/wext.c 2008-12-31 17:11:41.000000000 +0200
+++ wireless-testing/net/mac80211/wext.c 2008-12-31 17:12:37.000000000 +0200
@@ -961,6 +961,13 @@ static int ieee80211_ioctl_siwauth(struc
else
ret = -EOPNOTSUPP;
break;
+ case IW_AUTH_MFP:
+ if (sdata->vif.type == NL80211_IFTYPE_STATION ||
+ sdata->vif.type == NL80211_IFTYPE_ADHOC)
+ sdata->u.sta.mfp = data->value;
+ else
+ ret = -EOPNOTSUPP;
+ break;
default:
ret = -EOPNOTSUPP;
break;
--- wireless-testing.orig/net/mac80211/mlme.c 2008-12-31 16:48:01.000000000 +0200
+++ wireless-testing/net/mac80211/mlme.c 2008-12-31 17:12:37.000000000 +0200
@@ -2332,6 +2332,10 @@ static int ieee80211_sta_config_auth(str
selected->ssid_len);
ieee80211_sta_set_bssid(sdata, selected->bssid);
ieee80211_sta_def_wmm_params(sdata, selected);
+ if (sdata->u.sta.mfp == IEEE80211_MFP_REQUIRED)
+ sdata->u.sta.flags |= IEEE80211_STA_MFP_ENABLED;
+ else
+ sdata->u.sta.flags &= ~IEEE80211_STA_MFP_ENABLED;
/* Send out direct probe if no probe resp was received or
* the one we have is outdated
--
--
Jouni Malinen PGP id EFC895FA
next prev parent reply other threads:[~2008-12-31 15:42 UTC|newest]
Thread overview: 15+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-12-31 15:38 [RFC 00/11] mac80211: Add support for IEEE 802.11w (MFP) Jouni Malinen
2008-12-31 15:38 ` [RFC 01/11] mac80211: 802.11w - STA flag for MFP Jouni Malinen
2008-12-31 15:38 ` [RFC 02/11] mac80211: 802.11w - CCMP for management frames Jouni Malinen
2009-01-02 10:04 ` Johannes Berg
2009-01-02 10:06 ` Johannes Berg
2008-12-31 15:38 ` [RFC 03/11] mac80211: 802.11w - Add BIP (AES-128-CMAC) Jouni Malinen
2008-12-31 15:38 ` [RFC 04/11] mac80211: 802.11w - Use " Jouni Malinen
2008-12-31 15:38 ` [RFC 05/11] mac80211: 802.11w - WEXT parameter for setting mgmt cipher Jouni Malinen
2008-12-31 15:38 ` [RFC 06/11] mac80211: 802.11w - WEXT configuration for IGTK Jouni Malinen
2008-12-31 15:38 ` Jouni Malinen [this message]
2008-12-31 15:38 ` [RFC 08/11] mac80211: 802.11w - SA Query processing Jouni Malinen
2008-12-31 15:38 ` [RFC 09/11] mac80211: 802.11w - Do not force Action frames to disable encryption Jouni Malinen
2008-12-31 15:38 ` [RFC 10/11] mac80211: 802.11w - Drop unprotected robust management frames if MFP is used Jouni Malinen
2008-12-31 15:38 ` [RFC 11/11] mac80211: 802.11w - Implement Association Comeback processing Jouni Malinen
2009-01-02 10:12 ` [RFC 00/11] mac80211: Add support for IEEE 802.11w (MFP) Johannes Berg
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20081231154224.895735911@w1.fi \
--to=j@w1.fi \
--cc=johannes@sipsolutions.net \
--cc=linux-wireless@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).