summaryrefslogtreecommitdiffstats
path: root/net/xfrm/xfrm_policy.c
diff options
context:
space:
mode:
authorDavid S. Miller <davem@davemloft.net>2008-09-09 16:08:51 -0700
committerDavid S. Miller <davem@davemloft.net>2008-09-09 16:08:51 -0700
commit28faa979746b2352cd78a376bf9f52db953bda46 (patch)
tree8fec5cf690331e3f99d712fca7f38f00ec17625d /net/xfrm/xfrm_policy.c
parentded67c0e2f0388458c36e8fd3b0c8be07c53db08 (diff)
downloadop-kernel-dev-28faa979746b2352cd78a376bf9f52db953bda46.zip
op-kernel-dev-28faa979746b2352cd78a376bf9f52db953bda46.tar.gz
ipsec: Make xfrm_larval_drop default to 1.
The previous default behavior is definitely the least user friendly. Hanging there forever just because the keying daemon is wedged or the refreshing of the policy can't move forward is anti-social to say the least. Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/xfrm/xfrm_policy.c')
-rw-r--r--net/xfrm/xfrm_policy.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/net/xfrm/xfrm_policy.c b/net/xfrm/xfrm_policy.c
index 46914b7..638bb5f 100644
--- a/net/xfrm/xfrm_policy.c
+++ b/net/xfrm/xfrm_policy.c
@@ -34,7 +34,7 @@
#include "xfrm_hash.h"
-int sysctl_xfrm_larval_drop __read_mostly;
+int sysctl_xfrm_larval_drop __read_mostly = 1;
#ifdef CONFIG_XFRM_STATISTICS
DEFINE_SNMP_STAT(struct linux_xfrm_mib, xfrm_statistics) __read_mostly;
OpenPOWER on IntegriCloud