Re: patch: policy update by id

[Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>]

On Wed, Apr 27, 2005 at 09:52:20PM -0400, jamal wrote:
>
> > 1) There is only one policy with a given selector.
> > 2) There is only one policy with a given index.
> 
> Well, while snooping i was bothered as well. I am not sure i agree with
> your #1 above ;->
> 
> 1) It would seem to me that the priority field is to be used 
> as a ambiguity resolver (thats what a gazillion other classification
> schemes do). 

You know what, I actually agree with you :) But you'll need to convince
Dave:

http://www.uwsg.iu.edu/hypermail/linux/net/0305.3/0018.html

However, this doesn't change the fact that you may need to delete
two policies.

> 2) index really oughta be unique across the SPD.  
> Current behavior: I can add several new rules with the same index.

Not really.  The kernel ignores the index supplied when you're
adding them.

Cheers,
-- 
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert@xxxxxxxxxxxxxxxxxxx>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt