OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
CVS: cvs.openbsd.org: src

From: Hans-Joerg Hoexer (hshoexercvs.openbsd.org)
Date: Mon Jul 30 2007 - 06:43:59 CDT


CVSROOT: /cvs
Module name: src
Changes by: hshoexercvs.openbsd.org 2007/07/30 05:43:59

Modified files:
        sys/net : pfkeyv2_parsemessage.c

Log message:
With adding ipsec tags and exporting flow filters via sysctl SADB_GET
needs to be allowed to export that information too. Thus, adjust
sadb_exts_allowed_out[] accordingly.

This fixes isakmpd not being able to get the in-kernel last-used-counters
of SAs, which are needed for DPD.

ok ho