linux-wireless.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: Jouni Malinen <j@w1.fi>
To: Johannes Berg <johannes@sipsolutions.net>
Cc: linux-wireless@vger.kernel.org, Jouni Malinen <j@w1.fi>
Subject: [RFC 07/11] mac80211: 802.11w - Configuration of MFP disabled/optional/required
Date: Wed, 31 Dec 2008 17:38:41 +0200	[thread overview]
Message-ID: <20081231154224.895735911@w1.fi> (raw)
In-Reply-To: 20081231153834.840526845@w1.fi

Add new WEXT IW_AUTH_* parameter for setting MFP
disabled/optional/required.

Signed-off-by: Jouni Malinen <j@w1.fi>


---
 include/linux/wireless.h   |    6 ++++++
 net/mac80211/ieee80211_i.h |    6 ++++++
 net/mac80211/mlme.c        |    4 ++++
 net/mac80211/wext.c        |    7 +++++++
 4 files changed, 23 insertions(+)

--- wireless-testing.orig/include/linux/wireless.h	2008-12-31 17:11:41.000000000 +0200
+++ wireless-testing/include/linux/wireless.h	2008-12-31 17:12:37.000000000 +0200
@@ -578,6 +578,7 @@
 #define IW_AUTH_ROAMING_CONTROL		9
 #define IW_AUTH_PRIVACY_INVOKED		10
 #define IW_AUTH_CIPHER_GROUP_MGMT	11
+#define IW_AUTH_MFP			12
 
 /* IW_AUTH_WPA_VERSION values (bit field) */
 #define IW_AUTH_WPA_VERSION_DISABLED	0x00000001
@@ -607,6 +608,11 @@
 #define IW_AUTH_ROAMING_DISABLE	1	/* user space program used for roaming
 					 * control */
 
+/* IW_AUTH_MFP (management frame protection) values */
+#define IW_AUTH_MFP_DISABLED	0	/* MFP disabled */
+#define IW_AUTH_MFP_OPTIONAL	1	/* MFP optional */
+#define IW_AUTH_MFP_REQUIRED	2	/* MFP required */
+
 /* SIOCSIWENCODEEXT definitions */
 #define IW_ENCODE_SEQ_MAX_SIZE	8
 /* struct iw_encode_ext ->alg */
--- wireless-testing.orig/net/mac80211/ieee80211_i.h	2008-12-31 17:04:36.000000000 +0200
+++ wireless-testing/net/mac80211/ieee80211_i.h	2008-12-31 17:12:37.000000000 +0200
@@ -317,6 +317,12 @@ struct ieee80211_if_sta {
 	int auth_alg; /* currently used IEEE 802.11 authentication algorithm */
 	int auth_transaction;
 
+	enum {
+		IEEE80211_MFP_DISABLED,
+		IEEE80211_MFP_OPTIONAL,
+		IEEE80211_MFP_REQUIRED
+	} mfp; /* management frame protection */
+
 	unsigned long ibss_join_req;
 	struct sk_buff *probe_resp; /* ProbeResp template for IBSS */
 	u32 supp_rates_bits[IEEE80211_NUM_BANDS];
--- wireless-testing.orig/net/mac80211/wext.c	2008-12-31 17:11:41.000000000 +0200
+++ wireless-testing/net/mac80211/wext.c	2008-12-31 17:12:37.000000000 +0200
@@ -961,6 +961,13 @@ static int ieee80211_ioctl_siwauth(struc
 		else
 			ret = -EOPNOTSUPP;
 		break;
+	case IW_AUTH_MFP:
+		if (sdata->vif.type == NL80211_IFTYPE_STATION ||
+		    sdata->vif.type == NL80211_IFTYPE_ADHOC)
+			sdata->u.sta.mfp = data->value;
+		else
+			ret = -EOPNOTSUPP;
+		break;
 	default:
 		ret = -EOPNOTSUPP;
 		break;
--- wireless-testing.orig/net/mac80211/mlme.c	2008-12-31 16:48:01.000000000 +0200
+++ wireless-testing/net/mac80211/mlme.c	2008-12-31 17:12:37.000000000 +0200
@@ -2332,6 +2332,10 @@ static int ieee80211_sta_config_auth(str
 					       selected->ssid_len);
 		ieee80211_sta_set_bssid(sdata, selected->bssid);
 		ieee80211_sta_def_wmm_params(sdata, selected);
+		if (sdata->u.sta.mfp == IEEE80211_MFP_REQUIRED)
+			sdata->u.sta.flags |= IEEE80211_STA_MFP_ENABLED;
+		else
+			sdata->u.sta.flags &= ~IEEE80211_STA_MFP_ENABLED;
 
 		/* Send out direct probe if no probe resp was received or
 		 * the one we have is outdated

-- 

-- 
Jouni Malinen                                            PGP id EFC895FA

  parent reply	other threads:[~2008-12-31 15:42 UTC|newest]

Thread overview: 15+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2008-12-31 15:38 [RFC 00/11] mac80211: Add support for IEEE 802.11w (MFP) Jouni Malinen
2008-12-31 15:38 ` [RFC 01/11] mac80211: 802.11w - STA flag for MFP Jouni Malinen
2008-12-31 15:38 ` [RFC 02/11] mac80211: 802.11w - CCMP for management frames Jouni Malinen
2009-01-02 10:04   ` Johannes Berg
2009-01-02 10:06     ` Johannes Berg
2008-12-31 15:38 ` [RFC 03/11] mac80211: 802.11w - Add BIP (AES-128-CMAC) Jouni Malinen
2008-12-31 15:38 ` [RFC 04/11] mac80211: 802.11w - Use " Jouni Malinen
2008-12-31 15:38 ` [RFC 05/11] mac80211: 802.11w - WEXT parameter for setting mgmt cipher Jouni Malinen
2008-12-31 15:38 ` [RFC 06/11] mac80211: 802.11w - WEXT configuration for IGTK Jouni Malinen
2008-12-31 15:38 ` Jouni Malinen [this message]
2008-12-31 15:38 ` [RFC 08/11] mac80211: 802.11w - SA Query processing Jouni Malinen
2008-12-31 15:38 ` [RFC 09/11] mac80211: 802.11w - Do not force Action frames to disable encryption Jouni Malinen
2008-12-31 15:38 ` [RFC 10/11] mac80211: 802.11w - Drop unprotected robust management frames if MFP is used Jouni Malinen
2008-12-31 15:38 ` [RFC 11/11] mac80211: 802.11w - Implement Association Comeback processing Jouni Malinen
2009-01-02 10:12 ` [RFC 00/11] mac80211: Add support for IEEE 802.11w (MFP) Johannes Berg

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20081231154224.895735911@w1.fi \
    --to=j@w1.fi \
    --cc=johannes@sipsolutions.net \
    --cc=linux-wireless@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).