Re: resend patch: xfrm policybyid

[Patrick McHardy <kaber@trash.net>]

jamal wrote:
> On Sun, 2005-08-05 at 18:07 +1000, Herbert Xu wrote:
> 
>>Please elaborate by giving an example of how the index is actually
>>used.  Sorry, but as it is I'm too thick to see your point :)
>
> I have given you enough info that i am concluding this is now becoming a
> debate for the sake of one;->
> 
> Sorry, Herbert, I strongly disagree with your views on this topic. This
> is one of those moments when it becomes obvious there can be no
> compromise. So I am hoping that someone following this discussion or
> writing management apps would speak up.

Allowing the user to freely set indices breaks racoon:

#ifdef __linux__
        /* bsd skips over per-socket policies because there will be no
         * src and dst extensions in spddump messages. On Linux the only
         * way to achieve the same is check for policy id.
         */
        if (xpl->sadb_x_policy_id % 8 >= 3) return 0;
#endif

So how could we handle this?

Regards
Patrick