tech-net archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: Recent IPSEC changes

Ryota Ozaki <> wrote:
>On Fri, Oct 13, 2017 at 5:49 AM, Robert Swindells <> wrote:
>> I think something in the recent IPSEC changes is setting the ipsec_used
>> flag to be always true.
>Not really on my machine. I guess it depends on environments.

My environment is INET, INET6 & IPSEC in the kernel config, no modules.

I have taken out any other protocols.

>There is a change that affects the ipsec_used flag:


>It turns on the flag when a socket is enabled the IP_IPSEC_POLICY option.
>There was a bug that having such a socket didn't turn on the flag; the
>above commit fixed the bug.

The flag is on at boot for me.

>Do you have any processes having a socket with IP_IPSEC_POLICY on your
>machine in mind?


Robert Swindells

Home | Main Index | Thread Index | Old Index