From: David S. Miller Date: Tue, 9 Sep 2008 23:08:51 +0000 (-0700) Subject: ipsec: Make xfrm_larval_drop default to 1. X-Git-Tag: v2.6.28-rc1~717^2~302 X-Git-Url: http://pilppa.com/gitweb/?a=commitdiff_plain;h=28faa979746b2352cd78a376bf9f52db953bda46;p=linux-2.6-omap-h63xx.git ipsec: Make xfrm_larval_drop default to 1. The previous default behavior is definitely the least user friendly. Hanging there forever just because the keying daemon is wedged or the refreshing of the policy can't move forward is anti-social to say the least. Signed-off-by: David S. Miller --- diff --git a/net/xfrm/xfrm_policy.c b/net/xfrm/xfrm_policy.c index 46914b79d85..638bb5ff99a 100644 --- a/net/xfrm/xfrm_policy.c +++ b/net/xfrm/xfrm_policy.c @@ -34,7 +34,7 @@ #include "xfrm_hash.h" -int sysctl_xfrm_larval_drop __read_mostly; +int sysctl_xfrm_larval_drop __read_mostly = 1; #ifdef CONFIG_XFRM_STATISTICS DEFINE_SNMP_STAT(struct linux_xfrm_mib, xfrm_statistics) __read_mostly;