diff options
| author | Herbert Xu <herbert@gondor.apana.org.au> | 2007-11-13 21:39:08 -0800 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2008-01-28 14:53:43 -0800 |
| commit | e40b3286158565909692e5914ea4a11bdbcc68c8 (patch) | |
| tree | 5ef7b76f1e02406bb839e4887f6a79ff36dde39f /net/xfrm/xfrm_output.c | |
| parent | 25ee3286dcbc830a833354bb1d15567956844813 (diff) | |
| download | linux-stable-e40b3286158565909692e5914ea4a11bdbcc68c8.tar.gz linux-stable-e40b3286158565909692e5914ea4a11bdbcc68c8.tar.bz2 linux-stable-e40b3286158565909692e5914ea4a11bdbcc68c8.zip | |
[IPSEC]: Forbid BEET + ipcomp for now
While BEET can theoretically work with IPComp the current code can't
do that because it tries to construct a BEET mode tunnel type which
doesn't (and cannot) exist. In fact as it is it won't even attach a
tunnel object at all for BEET which is bogus.
To support this fully we'd also need to change the policy checks on
input to recognise a plain tunnel as a legal variant of an optional
BEET transform.
This patch simply fails such constructions for now.
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/xfrm/xfrm_output.c')
0 files changed, 0 insertions, 0 deletions