linux-ipsec: Add SA default behaviour?

-----BEGIN PGP SIGNED MESSAGE-----
I am currently pondering what should be the default behaviour of the utility to add an SA ('spi'). If it already exists, should it be silently replaced? This was the original behaviour. This is different from the utility that sets the eroutes ('eroute'), which complains when you try to overwrite. Oddly enough, 'route' just silently replaces it.

I would prefer that it complain for 'eroute' and 'spi', with a predictable error return code.

Thoughts, arguments, comments?

        Slainte Mhath, rgb
- --

Richard Guy Briggs -- PGP key available                       Auto-Free Ottawa!
rgb at conscoop dot ottawa dot on dot ca              
http://www.flora.org/afo/http://www.achilles.net/~rgb/                   Ottawa-Rideau Bioregion, Canada

"We left our footprints in the Earth
And punched a hole right through the sky" -- S.Hogarth/J.Helmer(Marillion)

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: noconv

iQCVAwUBNVyB59+sBuIhFagtAQErIgQAowSs2ecbkgvrp3pHcjnfK8m10Sc9Bslb Odzn1XcaG58VDW7qc9CHmm8JadhMXgZ9ou2l7rahIA1q4+aTd3ALilK2PAYn/6GW lq1Dp+72CUqtvTkIXVdAmm8iy9uCVIM39dXI9Ik9X6/SAXvyGmtqs3pGvUCQ8zxC Eh+Osp+EmuA=
=jBWZ
-----END PGP SIGNATURE-----
Received on Fri May 15 14:55:56 1998