From 5164136d2547b6fa733bfeeeae1b48333508f102 Mon Sep 17 00:00:00 2001 From: "Bjoern A. Zeeb" Date: Sat, 13 Sep 2008 14:06:36 +0000 Subject: [PATCH] Turn on TCP_SIGNATURE for LINT builds. This should catch situations we ran into in the past where places hidden by TCP_SIGNATURE were missed. It is possible to turn it on now that FAST_IPSEC (now know as IPSEC) is enabled for LINT and the default and only IPsec implementation. --- sys/conf/NOTES | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sys/conf/NOTES b/sys/conf/NOTES index 74a3ee66757..c93927f011a 100644 --- a/sys/conf/NOTES +++ b/sys/conf/NOTES @@ -889,7 +889,7 @@ options ACCEPT_FILTER_HTTP # This is enabled on a per-socket basis using the TCP_MD5SIG socket option. # This requires the use of 'device crypto', 'options IPSEC' # or 'device cryptodev'. -#options TCP_SIGNATURE #include support for RFC 2385 +options TCP_SIGNATURE #include support for RFC 2385 # DUMMYNET enables the "dummynet" bandwidth limiter. You need IPFIREWALL # as well. See dummynet(4) and ipfw(8) for more info. When you run