unsigned int satype,
unsigned int transport_proto,
ipsec_sa_cfg_t *sa,
- time_t use_lifetime,
unsigned int op,
const char *opname USED_BY_DEBUG)
{
if (!deleting)
{
- /* FIXME: use_lifetime? */
ok = hydra->kernel_interface->add_policy(hydra->kernel_interface,
host_src, host_dst, ts_src, ts_dst, dir, type, sa,
mark, routed) == SUCCESS;
if (!deleting && ok &&
(sa->mode == MODE_TUNNEL || satype == SADB_X_SATYPE_INT))
{
- /* FIXME: use_lifetime? */
ok = hydra->kernel_interface->add_policy(hydra->kernel_interface,
host_src, host_dst, ts_src, ts_dst, dir, type, sa,
mark, routed) == SUCCESS;
}
return raw_eroute(&sr->this.host_addr, &sr->this.client, peer,
&sr->that.client, sr->mark_out, spi, proto, satype,
- sr->this.protocol, sa, 0, op, buf2);
+ sr->this.protocol, sa, op, buf2);
}
/* assign a bare hold to a connection */
ok = raw_eroute(&sr->that.host_addr, &sr->that.client,
&sr->this.host_addr, &sr->this.client, sr->mark_in,
htonl(spi), SA_INT, SADB_X_SATYPE_INT, sr->this.protocol,
- &null_ipsec_sa, 0,
+ &null_ipsec_sa,
op | (SADB_X_SAFLAGS_INFLOW << ERO_FLAG_SHIFT), opname);
return eroute_connection(sr, htonl(spi), SA_INT, SADB_X_SATYPE_INT,
{
(void) raw_eroute(&src->host_addr, &src->client, &dst->host_addr,
&dst->client, mark, 256, SA_IPIP, SADB_SATYPE_UNSPEC,
- c->spd.this.protocol, &sa, 0, ERO_ADD_INBOUND,
+ c->spd.this.protocol, &sa, ERO_ADD_INBOUND,
"add inbound");
}
(void) raw_eroute(&src->host_addr, &src->client, &dst->host_addr,
&dst->client, mark, 256, IPSEC_PROTO_ANY,
SADB_SATYPE_UNSPEC, c->spd.this.protocol,
- &null_ipsec_sa, 0, ERO_DEL_INBOUND,
+ &null_ipsec_sa, ERO_DEL_INBOUND,
"delete inbound");
}
}