Module Name: src
Committed By: christos
Date: Fri May 30 01:43:20 UTC 2014
Modified Files:
src/share/man/man7: sysctl.7
Log Message:
Explain ipsec.enabled better.
To generate a diff of this commit:
cvs rdiff -u -r1.80 -r1.81 src/share/man/man7/sysctl.7
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
Modified files:
Index: src/share/man/man7/sysctl.7
diff -u src/share/man/man7/sysctl.7:1.80 src/share/man/man7/sysctl.7:1.81
--- src/share/man/man7/sysctl.7:1.80 Thu May 29 21:34:32 2014
+++ src/share/man/man7/sysctl.7 Thu May 29 21:43:20 2014
@@ -1,4 +1,4 @@
-.\" $NetBSD: sysctl.7,v 1.80 2014/05/30 01:34:32 christos Exp $
+.\" $NetBSD: sysctl.7,v 1.81 2014/05/30 01:43:20 christos Exp $
.\"
.\" Copyright (c) 1993
.\" The Regents of the University of California. All rights reserved.
@@ -1909,7 +1909,15 @@ Turn on debugging message from within th
The value is a bitmap, as defined in
.In netkey/key_debug.h .
.It Li enabled
-Turn on and off IPsec processing.
+Control processing of IPsec control messages.
+.Bl -tag -width indent
+.It 0
+Never allow IPsec processing
+.It 1
+Allow IPsec processing when SPD policies are present.
+.It 2
+Force IPsec processing even when SPD policies are not present.
+.El
.It Li used
Based on if IPsec is enabled, and SPD rule existance, show if
IPsec is being used.
