summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMasahide NAKAMURA <nakam@linux-ipv6.org>2006-08-23 22:38:14 -0700
committerDavid S. Miller <davem@sunset.davemloft.net>2006-09-22 15:08:33 -0700
commitc11f1a15c522ddd3bbd2c32b5ce3e0b1831b22f2 (patch)
tree6946876fcace9b21e142ba21f03a6ebd7801e8d2
parent01be8e5d59d7e6da5c425a31b43709c2a4a69b5d (diff)
downloadlinux-c11f1a15c522ddd3bbd2c32b5ce3e0b1831b22f2.tar.bz2
[XFRM] POLICY: Add Kconfig to support sub policy.
Add Kconfig to support sub policy. Signed-off-by: Masahide NAKAMURA <nakam@linux-ipv6.org> Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org> Signed-off-by: David S. Miller <davem@davemloft.net>
-rw-r--r--net/xfrm/Kconfig10
1 files changed, 10 insertions, 0 deletions
diff --git a/net/xfrm/Kconfig b/net/xfrm/Kconfig
index 43228f7fd3a0..0faab6332586 100644
--- a/net/xfrm/Kconfig
+++ b/net/xfrm/Kconfig
@@ -14,6 +14,16 @@ config XFRM_USER
If unsure, say Y.
+config XFRM_SUB_POLICY
+ bool "Transformation sub policy support (EXPERIMENTAL)"
+ depends on XFRM && EXPERIMENTAL
+ ---help---
+ Support sub policy for developers. By using sub policy with main
+ one, two policies can be applied to the same packet at once.
+ Policy which lives shorter time in kernel should be a sub.
+
+ If unsure, say N.
+
config NET_KEY
tristate "PF_KEY sockets"
select XFRM