diff --git a/include/linux/xfrm.h b/include/linux/xfrm.h index 9b5b00c..f5cfb75 100644 --- a/include/linux/xfrm.h +++ b/include/linux/xfrm.h @@ -363,7 +363,6 @@ struct xfrm_userpolicy_info { #define XFRM_POLICY_ALLOW 0 #define XFRM_POLICY_BLOCK 1 __u8 flags; -#define XFRM_POLICY_LOCALOK 1 /* Allow user to override global policy */ /* Automatically expand selector to include matching ICMP payloads. */ #define XFRM_POLICY_ICMP 2 __u8 share; diff --git a/include/net/xfrm.h b/include/net/xfrm.h index 5ebb9ba..09b9bda 100644 --- a/include/net/xfrm.h +++ b/include/net/xfrm.h @@ -73,7 +73,7 @@ extern struct mutex xfrm_cfg_mutex; Lookup is plain linear search until the first match with selector. If "action" is "block", then we prohibit the flow, otherwise: - if "xfrms_nr" is zero, the flow passes untransformed. Otherwise, + if "xfrm_nr" is zero, the flow passes untransformed. Otherwise, policy entry has list of up to XFRM_MAX_DEPTH transformations, described by templates xfrm_tmpl. Each template is resolved to a complete xfrm_state (see below) and we pack bundle of transformations @@ -84,10 +84,10 @@ extern struct mutex xfrm_cfg_mutex; |---. child .-> dst -. xfrm .-> xfrm_state #3 |---. child .-> NULL - Bundles are cached at xrfm_policy struct (field ->bundles). + Bundles are cached at xfrm_policy struct (field ->bundles). - Resolution of xrfm_tmpl + Resolution of xfrm_tmpl ----------------------- Template contains: 1. ->mode Mode: transport or tunnel @@ -133,7 +133,7 @@ struct xfrm_state u32 genid; - /* Key manger bits */ + /* Key manager bits */ struct { u8 state; u8 dying;