summaryrefslogtreecommitdiffstats
path: root/net/xfrm
diff options
context:
space:
mode:
authorDavid S. Miller <davem@davemloft.net>2008-09-09 16:08:51 -0700
committerDavid S. Miller <davem@davemloft.net>2008-09-09 16:08:51 -0700
commit28faa979746b2352cd78a376bf9f52db953bda46 (patch)
tree8fec5cf690331e3f99d712fca7f38f00ec17625d /net/xfrm
parentded67c0e2f0388458c36e8fd3b0c8be07c53db08 (diff)
downloadop-kernel-dev-28faa979746b2352cd78a376bf9f52db953bda46.zip
op-kernel-dev-28faa979746b2352cd78a376bf9f52db953bda46.tar.gz
ipsec: Make xfrm_larval_drop default to 1.
The previous default behavior is definitely the least user friendly. Hanging there forever just because the keying daemon is wedged or the refreshing of the policy can't move forward is anti-social to say the least. Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/xfrm')
-rw-r--r--net/xfrm/xfrm_policy.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/net/xfrm/xfrm_policy.c b/net/xfrm/xfrm_policy.c
index 46914b7..638bb5f 100644
--- a/net/xfrm/xfrm_policy.c
+++ b/net/xfrm/xfrm_policy.c
@@ -34,7 +34,7 @@
#include "xfrm_hash.h"
-int sysctl_xfrm_larval_drop __read_mostly;
+int sysctl_xfrm_larval_drop __read_mostly = 1;
#ifdef CONFIG_XFRM_STATISTICS
DEFINE_SNMP_STAT(struct linux_xfrm_mib, xfrm_statistics) __read_mostly;
OpenPOWER on IntegriCloud