[Swan-commit] Changes to ref refs/heads/main

Andrew Cagney cagney at vault.libreswan.fi
Sat Mar 25 19:54:08 EET 2023


New commits:
commit 246a5d98dbcfb88862c60e22467e15f72e6bf11a
Author: Andrew Cagney <cagney at gnu.org>
Date:   Fri Mar 24 22:59:03 2023 -0400

    routing: split RT_ROUTED_PROSPECTIVE into RT_ROUTED_{NEVER_NEGOTIATE,ONDEMAND}
    
    As hinted at by #1053 and #1047 the kernel policy installed by
    "route" is either:
    
    - never negotiate - hold, drop, reject - both inbound and outbound
    
    - ondemand - trap - only outbound
    
    This splits the routing states to reflect this (and solves another
    mystery as to why code was unsure about the need to rip out
    inbound kernel policies.



More information about the Swan-commit mailing list