aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorTobias Brunner <tobias@strongswan.org>2014-05-13 12:20:02 +0200
committerTobias Brunner <tobias@strongswan.org>2014-06-19 14:20:33 +0200
commit5b883719a13561b032ca3000a7caa918ad53db6e (patch)
treeb6a97a5401d9ce43e515439ddbdb419887626339
parent77b6a145a029810339033ad183d0e23169a787c7 (diff)
downloadstrongswan-5b883719a13561b032ca3000a7caa918ad53db6e.tar.bz2
strongswan-5b883719a13561b032ca3000a7caa918ad53db6e.tar.xz
libipsec: Add support for new policy priority class
-rw-r--r--src/libipsec/ipsec_policy_mgr.c5
1 files changed, 4 insertions, 1 deletions
diff --git a/src/libipsec/ipsec_policy_mgr.c b/src/libipsec/ipsec_policy_mgr.c
index 02dc59d65..e2eaba014 100644
--- a/src/libipsec/ipsec_policy_mgr.c
+++ b/src/libipsec/ipsec_policy_mgr.c
@@ -22,7 +22,7 @@
#include <collections/linked_list.h>
/** Base priority for installed policies */
-#define PRIO_BASE 512
+#define PRIO_BASE 384
typedef struct private_ipsec_policy_mgr_t private_ipsec_policy_mgr_t;
@@ -88,6 +88,9 @@ static u_int32_t calculate_priority(policy_priority_t policy_priority,
priority <<= 1;
/* fall-through */
case POLICY_PRIORITY_DEFAULT:
+ priority <<= 1;
+ /* fall-through */
+ case POLICY_PRIORITY_PASS:
break;
}
/* calculate priority based on selector size, small size = high prio */