macsec: enable send-sci by default and make the option configurable

System Internals / NetworkManager - Beniamino Galvani [redhat.com] - 14 June 2018 13:13 EDT

It is safer to enable send-sci by default because, at the cost of 8-byte overhead, it makes MACsec work over bridges (note that kernel also enables it by default). While at it, also make the option configurable.

https://bugzilla.redhat.com/show_bug.cgi?id=1588041

bb20f2eb6 macsec: enable send-sci by default and make the option configurable
clients/common/nm-meta-setting-desc.c | 3 +++
clients/common/settings-docs.h.in | 1 +
libnm-core/nm-setting-macsec.c | 40 ++++++++++++++++++++++++++++++++++-
libnm-core/nm-setting-macsec.h | 3 +++
libnm/libnm.ver | 1 +
src/devices/nm-device-macsec.c | 1 +
6 files changed, 48 insertions(+), 1 deletion(-)

Upstream: cgit.freedesktop.org


  • Share