Re: linux-ipsec: Latest snapshot and 2.0.35

> > a known problem in this area, which we thought was obscure enough not to
> > cause much trouble, and this may be another manifestation of it.
>
> I bet the problem you've got with "make clean" is with this line

Correct. We noticed this a while back.

> I've got mixed emotions about using that symlink idea.

Frankly, so do we. If you've been following the history of the way "make insert" works, you'll see that we've tried more than one approach. The real problem is, quite simply, that there is no right way to do it, only wrong ones. The trick is finding the one that's least wrong. I'm not convinced we're there yet, but at the moment all the alternatives look worse.

> ...If you're going to modify files in the kernel source tree,

Trouble is, then you have two copies of the code, with all the problems that can ensue with them getting out of step. It also makes it hard for the kernel parts to refer to non-kernel parts -- for example, to the libraries that the two share.

> ...It seems

Sounds likely. At the very least, the protocol.c changes need to be wrapped in "#ifdef ipsec-is-not-a-module". While we consider static linking preferable for security-sensitive code, it *is* our intent that it continue to work as a module.

                                                          Henry Spencer
                                                       henry@spsystems.net
                                                     (henry@zoo.toronto.edu)

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related lists.freeswan.org Links 1998-fall 1998-spring 1998-summer 1998-winter 1999-winter announce briefs bugs design freeswan-list hipsec ietf-sectest users users-admin Request more information about Pantek