From: angelos <angelos@openbsd.org>
Date: Sat, 22 Feb 1997 07:24:25 +0000 (+0000)
Subject: Preliminaries for IPsec socket API.
X-Git-Url: http://artulab.com/gitweb/?a=commitdiff_plain;h=61e92df8910bb4aa4af7d2304bc248e0903cc1d2;p=openbsd

Preliminaries for IPsec socket API.
---

diff --git a/sys/sys/socket.h b/sys/sys/socket.h
index d9e2c6f390d..baf0818a058 100644
--- a/sys/sys/socket.h
+++ b/sys/sys/socket.h
@@ -1,4 +1,4 @@
-/*	$OpenBSD: socket.h,v 1.9 1997/02/20 01:07:35 deraadt Exp $	*/
+/*	$OpenBSD: socket.h,v 1.10 1997/02/22 07:24:25 angelos Exp $	*/
 /*	$NetBSD: socket.h,v 1.14 1996/02/09 18:25:36 christos Exp $	*/
 
 /*
@@ -78,6 +78,26 @@
 #define	SO_ERROR	0x1007		/* get error status and clear */
 #define	SO_TYPE		0x1008		/* get socket type */
 
+/*
+ * Security levels
+ */
+
+#define IPSEC_LEVEL_BYPASS	0x00	/* Bypass policy altogether */
+#define IPSEC_LEVEL_NONE	0x00	/* Send clear, accept any */
+#define IPSEC_LEVEL_AVAIL	0x01	/* Send secure if SA available */
+#define IPSEC_LEVEL_USE		0x02	/* Send secure, accept any */
+#define IPSEC_LEVEL_REQUIRE	0x03	/* Require secure inbound, also use */
+#define IPSEC_LEVEL_UNIQUE	0x04	/* Use outbound SA that is unique */
+#define IPSEC_LEVEL_DEFAULT	IPSEC_LEVEL_NONE
+
+/*
+ * Security categories
+ */
+
+#define IP_AUTH_LEVEL		0x00
+#define IP_ESP_TRANS_LEVEL	0x01
+#define IP_ESP_NETWORK_LEVEL	0x02
+
 /*
  * Structure used for manipulating linger option.
  */