Hi,

Allow raw IPv6 sockets for IPsec protocols.

ok?

bluhm

Index: netinet6/in6_proto.c
===================================================================
RCS file: /data/mirror/openbsd/cvs/src/sys/netinet6/in6_proto.c,v
retrieving revision 1.65
diff -u -p -r1.65 in6_proto.c
--- netinet6/in6_proto.c        14 Mar 2013 11:18:37 -0000      1.65
+++ netinet6/in6_proto.c        31 Mar 2013 00:20:38 -0000
@@ -176,20 +176,20 @@ struct ip6protosw inet6sw[] = {
 },
 #ifdef IPSEC
 { SOCK_RAW,    &inet6domain,   IPPROTO_AH,     PR_ATOMIC|PR_ADDR,
-  ah6_input,   0,              0,              0,
-  0,
+  ah6_input,   rip6_output,    0,              rip6_ctloutput,
+  rip6_usrreq,
   0,           0,              0,              0,
   ah_sysctl,
 },
 { SOCK_RAW,    &inet6domain,   IPPROTO_ESP,    PR_ATOMIC|PR_ADDR,
-  esp6_input,  0,              0,              0,
-  0,
+  esp6_input,  rip6_output,    0,              rip6_ctloutput,
+  rip6_usrreq,
   0,           0,              0,              0,
   esp_sysctl,
 },
 { SOCK_RAW,    &inet6domain,   IPPROTO_IPCOMP, PR_ATOMIC|PR_ADDR,
-  ipcomp6_input, 0,            0,              0,
-  0,
+  ipcomp6_input, rip6_output,  0,              rip6_ctloutput,
+  rip6_usrreq,
   0,           0,              0,              0,
   ipcomp_sysctl,
 },

Reply via email to