[Swan-commit] Changes to ref refs/heads/main
Andrew Cagney
cagney at vault.libreswan.fi
Sat Mar 25 19:54:08 EET 2023
New commits:
commit 246a5d98dbcfb88862c60e22467e15f72e6bf11a
Author: Andrew Cagney <cagney at gnu.org>
Date: Fri Mar 24 22:59:03 2023 -0400
routing: split RT_ROUTED_PROSPECTIVE into RT_ROUTED_{NEVER_NEGOTIATE,ONDEMAND}
As hinted at by #1053 and #1047 the kernel policy installed by
"route" is either:
- never negotiate - hold, drop, reject - both inbound and outbound
- ondemand - trap - only outbound
This splits the routing states to reflect this (and solves another
mystery as to why code was unsure about the need to rip out
inbound kernel policies.
More information about the Swan-commit
mailing list