On Tue, 3 Oct 2006, David Miller wrote:

I'm not saying either is wrong, I'm just pointing it out to make sure
this is intentional.

The socket policy behavior deserves some scrutiny.  I say this because
if a matching socket policy is avoided due to security layer error,
this could potentially make key manager problems very hard to
diagnose.

Yep, the code needs to be reworked in general (Venkat is doing this).



- James
-- 
James Morris
[off-list ref]