updown: Don't call the script for per-CPU SAs

Rules are installed for the fallback SA that has no CPU ID assigned.

src/libcharon/plugins/updown/updown_listener.c

@@ -435,6 +435,11 @@ METHOD(listener_t, child_updown, bool,
 	enumerator_t *enumerator;
 	child_cfg_t *config;
 
+	if (child_sa->get_cpu(child_sa) != CPU_ID_MAX)
+	{	/* don't call the script for per-CPU SAs */
+		return TRUE;
+	}
+
 	config = child_sa->get_config(child_sa);
 	if (config->get_updown(config))
 	{