diff options
author | Tobias Brunner <tobias@strongswan.org> | 2016-10-11 14:30:21 +0200 |
---|---|---|
committer | Tobias Brunner <tobias@strongswan.org> | 2017-02-08 10:36:38 +0100 |
commit | 0e9d6c46050452e9be1b3df93fa7589d5db42e8a (patch) | |
tree | fa4eaaabbe655b52369cc32e700e459f78bcc5e7 /src/libcharon/plugins/kernel_pfkey/kernel_pfkey_ipsec.c | |
parent | 6606393b8c359de0b23c019a8875f7fa484964a5 (diff) | |
download | strongswan-0e9d6c46050452e9be1b3df93fa7589d5db42e8a.tar.bz2 strongswan-0e9d6c46050452e9be1b3df93fa7589d5db42e8a.tar.xz |
kernel-netlink: Use the same priority range for trap and regular policies
While trap and regular policies now often look the same (mainly because
reqids are kept constant) trap policies still need to have a lower priority
than regular policies to handle unroute/route correctly if e.g. IPComp
is used or the mode changes. But if we use a completely different
priority range that's lower than that of regular policies it is not possible
to install overlapping trap policies. By differentiating trap from
regular policies via the priority's LSB this issue is avoided while
still maintaining the proper ordering of trap and regular policies.
Fixes #1243.
Diffstat (limited to 'src/libcharon/plugins/kernel_pfkey/kernel_pfkey_ipsec.c')
0 files changed, 0 insertions, 0 deletions