From 77b6a145a029810339033ad183d0e23169a787c7 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Tue, 13 May 2014 12:19:41 +0200 Subject: kernel-pfkey: Add support for new policy priority class --- src/libhydra/plugins/kernel_pfkey/kernel_pfkey_ipsec.c | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) (limited to 'src/libhydra/plugins/kernel_pfkey/kernel_pfkey_ipsec.c') diff --git a/src/libhydra/plugins/kernel_pfkey/kernel_pfkey_ipsec.c b/src/libhydra/plugins/kernel_pfkey/kernel_pfkey_ipsec.c index 9bddb13a1..1037d9946 100644 --- a/src/libhydra/plugins/kernel_pfkey/kernel_pfkey_ipsec.c +++ b/src/libhydra/plugins/kernel_pfkey/kernel_pfkey_ipsec.c @@ -135,8 +135,8 @@ #define SOL_UDP IPPROTO_UDP #endif -/** default priority of installed policies */ -#define PRIO_BASE 512 +/** base priority for installed policies */ +#define PRIO_BASE 384 #ifdef __APPLE__ /** from xnu/bsd/net/pfkeyv2.h */ @@ -583,6 +583,9 @@ static inline u_int32_t get_priority(policy_entry_t *policy, priority <<= 1; /* fall-through */ case POLICY_PRIORITY_DEFAULT: + priority <<= 1; + /* fall-trough */ + case POLICY_PRIORITY_PASS: break; } /* calculate priority based on selector size, small size = high prio */ -- cgit v1.2.3