Re: 2.5 ipsec user policies

[Mika Penttilä <mika.penttila@kolumbus.fi>]

The thing is, ordinary users may well also be able to specify 
sk->policies, but they should never take precedence over admin specified 
global policies. That is simply wrong imho.



David S. Miller wrote:

>   From: Mika Penttilä <mika.penttila@kolumbus.fi>
>   Date: Sun, 01 Jun 2003 12:19:02 +0300
>
>   Yes but what if there's a global BLOCK policy? The user can bypass this 
>   with his own policy, or am I missing something?
>   
> The user can go home and use his home internet connection to override
> this BLOCK policy :-)
> -
> : send the line "unsubscribe linux-net" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
>
>  


-
: send the line "unsubscribe linux-net" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html