aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/plugins/kernel_pfkey/kernel_pfkey_ipsec.c
diff options
context:
space:
mode:
authorTobias Brunner <tobias@strongswan.org>2016-10-11 14:30:21 +0200
committerTobias Brunner <tobias@strongswan.org>2017-02-08 10:36:38 +0100
commit0e9d6c46050452e9be1b3df93fa7589d5db42e8a (patch)
treefa4eaaabbe655b52369cc32e700e459f78bcc5e7 /src/libcharon/plugins/kernel_pfkey/kernel_pfkey_ipsec.c
parent6606393b8c359de0b23c019a8875f7fa484964a5 (diff)
downloadstrongswan-0e9d6c46050452e9be1b3df93fa7589d5db42e8a.tar.bz2
strongswan-0e9d6c46050452e9be1b3df93fa7589d5db42e8a.tar.xz
kernel-netlink: Use the same priority range for trap and regular policies
While trap and regular policies now often look the same (mainly because reqids are kept constant) trap policies still need to have a lower priority than regular policies to handle unroute/route correctly if e.g. IPComp is used or the mode changes. But if we use a completely different priority range that's lower than that of regular policies it is not possible to install overlapping trap policies. By differentiating trap from regular policies via the priority's LSB this issue is avoided while still maintaining the proper ordering of trap and regular policies. Fixes #1243.
Diffstat (limited to 'src/libcharon/plugins/kernel_pfkey/kernel_pfkey_ipsec.c')
0 files changed, 0 insertions, 0 deletions