[XFRM] POLICY: Add Kconfig to support sub policy.
authorMasahide NAKAMURA <nakam@linux-ipv6.org>
Thu, 24 Aug 2006 05:38:14 +0000 (22:38 -0700)
committerDavid S. Miller <davem@sunset.davemloft.net>
Fri, 22 Sep 2006 22:08:33 +0000 (15:08 -0700)
Add Kconfig to support sub policy.

Signed-off-by: Masahide NAKAMURA <nakam@linux-ipv6.org>
Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/xfrm/Kconfig

index 43228f7fd3a055dc414f797dd1edb7489dc10790..0faab6332586a3dd7af013196e9cf998f690a3ec 100644 (file)
@@ -14,6 +14,16 @@ config XFRM_USER
 
          If unsure, say Y.
 
+config XFRM_SUB_POLICY
+       bool "Transformation sub policy support (EXPERIMENTAL)"
+       depends on XFRM && EXPERIMENTAL
+       ---help---
+         Support sub policy for developers. By using sub policy with main
+         one, two policies can be applied to the same packet at once.
+         Policy which lives shorter time in kernel should be a sub.
+
+         If unsure, say N.
+
 config NET_KEY
        tristate "PF_KEY sockets"
        select XFRM