diff options
| author | Tobias Brunner <tobias@strongswan.org> | 2016-02-04 10:57:31 +0100 |
|---|---|---|
| committer | Tobias Brunner <tobias@strongswan.org> | 2016-02-04 11:02:59 +0100 |
| commit | e8140531fce7c71c7d91cbcb6e6ecaa634b7f3e3 (patch) | |
| tree | 0a85ae2d2448db35dfeb586fea9fe4e718510142 /src/libipsec/ipsec_policy_mgr.h | |
| parent | e1e88d5adde099566fee98338026e815dd1e9044 (diff) | |
| download | strongswan-e8140531fce7c71c7d91cbcb6e6ecaa634b7f3e3.tar.bz2 strongswan-e8140531fce7c71c7d91cbcb6e6ecaa634b7f3e3.tar.xz | |
libipsec: Pass the same data to del_policy() as to add_policy()
We already do this for the other kernel interfaces.
Fixes e1e88d5adde0 ("libipsec: Don't attempt deletion of any non-IPsec policies")
Diffstat (limited to 'src/libipsec/ipsec_policy_mgr.h')
| -rw-r--r-- | src/libipsec/ipsec_policy_mgr.h | 11 |
1 files changed, 7 insertions, 4 deletions
diff --git a/src/libipsec/ipsec_policy_mgr.h b/src/libipsec/ipsec_policy_mgr.h index 30406bdb7..0ea797e7a 100644 --- a/src/libipsec/ipsec_policy_mgr.h +++ b/src/libipsec/ipsec_policy_mgr.h @@ -71,18 +71,21 @@ struct ipsec_policy_mgr_t { /** * Remove a policy * + * @param src source address of SA + * @param dst dest address of SA * @param src_ts traffic selector to match traffic source * @param dst_ts traffic selector to match traffic dest * @param direction direction of traffic, POLICY_(IN|OUT|FWD) - * @param reqid unique ID of the associated SA + * @param type type of policy, POLICY_(IPSEC|PASS|DROP) + * @param sa details about the SA(s) tied to this policy * @param mark optional mark * @param priority priority of the policy * @return SUCCESS if operation completed */ status_t (*del_policy)(ipsec_policy_mgr_t *this, - traffic_selector_t *src_ts, - traffic_selector_t *dst_ts, - policy_dir_t direction, u_int32_t reqid, mark_t mark, + host_t *src, host_t *dst, traffic_selector_t *src_ts, + traffic_selector_t *dst_ts, policy_dir_t direction, + policy_type_t type, ipsec_sa_cfg_t *sa, mark_t mark, policy_priority_t priority); /** |