diff options
| author | Angelos D. Keromytis <angelos@cvs.openbsd.org> | 2001-03-28 20:03:10 +0000 |
|---|---|---|
| committer | Angelos D. Keromytis <angelos@cvs.openbsd.org> | 2001-03-28 20:03:10 +0000 |
| commit | 3ddeb82e5920fb4ce16a363a4cdf2ff420fc6f8c (patch) | |
| tree | 21df0560d7db7bab293cc22bc52b21fd5727de8a /sys/net/pfkeyv2_parsemessage.c | |
| parent | 59779d47329c2626433e1ab0d847e7d7cd41aa48 (diff) | |
Allow tdbi's to appear in mbufs throughout the stack; this allows
security properties of the packets to be pushed up to the application
(not done yet). Eventually, this will be turned into a packet
attributes framework.
Make sure tdbi's are free'd/cleared properly whenever drivers (or NFS)
does weird things with mbufs.
Diffstat (limited to 'sys/net/pfkeyv2_parsemessage.c')
| -rw-r--r-- | sys/net/pfkeyv2_parsemessage.c | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/sys/net/pfkeyv2_parsemessage.c b/sys/net/pfkeyv2_parsemessage.c index 8d813c93514..d48831f17d3 100644 --- a/sys/net/pfkeyv2_parsemessage.c +++ b/sys/net/pfkeyv2_parsemessage.c @@ -60,7 +60,9 @@ you didn't get a copy, you may request one from <license@inner.net>. #define BITMAP_X_SA2 (1 << SADB_X_EXT_SA2) #define BITMAP_X_DST2 (1 << SADB_X_EXT_DST2) #define BITMAP_X_POLICY (1 << SADB_X_EXT_POLICY) -#define BITMAP_X_CREDENTIALS (1 << SADB_X_EXT_CREDENTIALS) +#define BITMAP_X_SRC_CREDENTIALS (1 << SADB_X_EXT_SRC_CREDENTIALS) +#define BITMAP_X_DST_CREDENTIALS (1 << SADB_X_EXT_DST_CREDENTIALS) +#define BITMAP_X_CREDENTIALS (BITMAP_X_SRC_CREDENTIALS | BITMAP_X_DST_CREDENTIALS) uint32_t sadb_exts_allowed_in[SADB_MAX+1] = { @@ -415,7 +417,8 @@ pfkeyv2_parsemessage(void *p, int len, void **headers) return EINVAL; } break; - case SADB_X_EXT_CREDENTIALS: + case SADB_X_EXT_SRC_CREDENTIALS: + case SADB_X_EXT_DST_CREDENTIALS: { struct sadb_cred *sadb_cred = (struct sadb_cred *)p; |