public inbox for netdev@vger.kernel.org 
 help / color / mirror / Atom feed

• * Re: [Openswan dev] ip xfrm bug
         [not found]   ` <20071214112118.118862c3@deepthought>
  @ 2007-12-16  7:43     ` Herbert Xu
    2007-12-23 13:06       ` jamal
    0 siblings, 1 reply; 2+ messages in thread
  From: Herbert Xu @ 2007-12-16  7:43 UTC (permalink / raw)
    To: Stephen Hemminger; +Cc: dev, netdev, jamal
  
  On Fri, Dec 14, 2007 at 11:21:18AM -0800, Stephen Hemminger wrote:
  >
  > I can see where to filter these, but I am ignorant of how to
  > identify the socket policies. Are they just marked as sub-policies?
  
  Jamal's going to hate me but setkey(8) already uses this so we're
  stuck with it anyway.
  
  The test is
  
  	up->index % 8 >= 3
  
  This is true iff it's a socket policy.
  
  Cheers,
  -- 
  Visit Openswan at http://www.openswan.org/
  Email: Herbert Xu ~{PmV>HI~} <herbert@gondor•apana.org.au>
  Home Page: http://gondor.apana.org.au/~herbert/
  PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
  
  ^ permalink raw reply	[flat|nested] 2+ messages in thread

• • * Re: ip xfrm bug
      2007-12-16  7:43     ` [Openswan dev] ip xfrm bug Herbert Xu
    @ 2007-12-23 13:06       ` jamal
      0 siblings, 0 replies; 2+ messages in thread
    From: jamal @ 2007-12-23 13:06 UTC (permalink / raw)
      To: Herbert Xu; +Cc: Stephen Hemminger, Paul Wouters, dev, netdev
    
    On Sun, 2007-16-12 at 15:43 +0800, Herbert Xu wrote:
    
    > Jamal's going to hate me but setkey(8) already uses this so we're
    > stuck with it anyway.
    > 
    > The test is
    > 
    > 	up->index % 8 >= 3
    > 
    > This is true iff it's a socket policy.
    
    I would have loved it if user space had a say ;-> 
    In the case of tc actions for example; the (table) index abides to the
    following rules:
    
     if user space specified one in rule insertion then {
         if available, use the allowed entry {
         } else if inuse {
             if replace flag is set then {
                replace
            } else {
             return error
         }
      } else {
       grab the next available index
      }
    
    makes management from user space much simpler.
    
    cheers,
    jamal
    
    
    ^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2007-12-23 13:06 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
     [not found] <Pine.LNX.4.64.0711291131080.21906@newtla.xelerance.com>
     [not found] ` <20071214091659.GA16129@gondor.apana.org.au>
     [not found]   ` <20071214112118.118862c3@deepthought>
2007-12-16  7:43     ` [Openswan dev] ip xfrm bug Herbert Xu
2007-12-23 13:06       ` jamal

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox