denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Install bypass policies after creating XFRM netlink socket, loading xfrm_user module

Browse Source
This commit is contained in:
Martin Willi
2009-11-09 15:07:00 +01:00
parent 8a650a2bc8
commit 67c3875c02
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/charon/plugins/kernel_netlink/kernel_netlink_ipsec.c
+6 -6
View File
@@ -1989,12 +1989,6 @@ kernel_netlink_ipsec_t *kernel_netlink_ipsec_create()
close(fd); close(fd);
} }
/* add bypass policies on the sockets used by charon */
if (!add_bypass_policies())
{
charon->kill(charon, "unable to add bypass policies on sockets");
}
this->socket_xfrm = netlink_socket_create(NETLINK_XFRM); this->socket_xfrm = netlink_socket_create(NETLINK_XFRM);
memset(&addr, 0, sizeof(addr)); memset(&addr, 0, sizeof(addr));
@@ -2013,6 +2007,12 @@ kernel_netlink_ipsec_t *kernel_netlink_ipsec_create()
charon->kill(charon, "unable to bind XFRM event socket"); charon->kill(charon, "unable to bind XFRM event socket");
} }
/* add bypass policies on the sockets used by charon */
if (!add_bypass_policies())
{
charon->kill(charon, "unable to add bypass policies on sockets");
}
this->job = callback_job_create((callback_job_cb_t)receive_events, this->job = callback_job_create((callback_job_cb_t)receive_events,
this, NULL, NULL); this, NULL, NULL);
charon->processor->queue_job(charon->processor, (job_t*)this->job); charon->processor->queue_job(charon->processor, (job_t*)this->job);