diff options
| author | Tobias Brunner <tobias@strongswan.org> | 2014-05-13 12:17:09 +0200 |
|---|---|---|
| committer | Tobias Brunner <tobias@strongswan.org> | 2014-06-19 14:20:33 +0200 |
| commit | f1675e4e291e98145acf274e7b8376601eac953a (patch) | |
| tree | 14852c62089da496397fb327a9ad4720563ff7dd /src/libhydra/plugins/kernel_netlink/kernel_netlink_ipsec.c | |
| parent | 479060d2d6c0a7474599d35a4bad5d6009895a6a (diff) | |
| download | strongswan-f1675e4e291e98145acf274e7b8376601eac953a.tar.bz2 strongswan-f1675e4e291e98145acf274e7b8376601eac953a.tar.xz | |
kernel-netlink: Add support for new policy priority class
Diffstat (limited to 'src/libhydra/plugins/kernel_netlink/kernel_netlink_ipsec.c')
| -rw-r--r-- | src/libhydra/plugins/kernel_netlink/kernel_netlink_ipsec.c | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/src/libhydra/plugins/kernel_netlink/kernel_netlink_ipsec.c b/src/libhydra/plugins/kernel_netlink/kernel_netlink_ipsec.c index 1e250d004..8642b8c0d 100644 --- a/src/libhydra/plugins/kernel_netlink/kernel_netlink_ipsec.c +++ b/src/libhydra/plugins/kernel_netlink/kernel_netlink_ipsec.c @@ -70,8 +70,8 @@ #define SOL_UDP IPPROTO_UDP #endif -/** Default priority of installed policies */ -#define PRIO_BASE 512 +/** Base priority for installed policies */ +#define PRIO_BASE 384 /** Default lifetime of an acquire XFRM state (in seconds) */ #define DEFAULT_ACQUIRE_LIFETIME 165 @@ -606,6 +606,9 @@ static inline u_int32_t get_priority(policy_entry_t *policy, priority <<= 1; /* fall-through */ case POLICY_PRIORITY_DEFAULT: + priority <<= 1; + /* fall-through */ + case POLICY_PRIORITY_PASS: break; } /* calculate priority based on selector size, small size = high prio */ |