1 /*-
8  * 1. Redistributions of source code must retain the above copyright
49 static int	sd = -1;  variable
57 	bypassbuf = ipsec_set_policy(policy_bypass, sizeof(policy_bypass) - 1);  in priv_netinet_ipsec_policy_bypass_setup_af()
60 		return (-1);  in priv_netinet_ipsec_policy_bypass_setup_af()
64 		sd = socket(AF_INET, SOCK_DGRAM, 0);  in priv_netinet_ipsec_policy_bypass_setup_af()
65 		if (sd < 0) {  in priv_netinet_ipsec_policy_bypass_setup_af()
67 			return (-1);  in priv_netinet_ipsec_policy_bypass_setup_af()
72 		sd = socket(AF_INET6, SOCK_DGRAM, 0);  in priv_netinet_ipsec_policy_bypass_setup_af()
73 		if (sd < 0) {  in priv_netinet_ipsec_policy_bypass_setup_af()
75 			return (-1);  in priv_netinet_ipsec_policy_bypass_setup_af()
81 		return (-1);  in priv_netinet_ipsec_policy_bypass_setup_af()
112 	entrustbuf = ipsec_set_policy(policy_entrust, sizeof(policy_entrust)-1);  in priv_netinet_ipsec_policy_entrust_setup_af()
115 		return (-1);  in priv_netinet_ipsec_policy_entrust_setup_af()
119 		sd = socket(AF_INET, SOCK_DGRAM, 0);  in priv_netinet_ipsec_policy_entrust_setup_af()
120 		if (sd < 0) {  in priv_netinet_ipsec_policy_entrust_setup_af()
122 			return (-1);  in priv_netinet_ipsec_policy_entrust_setup_af()
127 		sd = socket(AF_INET6, SOCK_DGRAM, 0);  in priv_netinet_ipsec_policy_entrust_setup_af()
128 		if (sd < 0) {  in priv_netinet_ipsec_policy_entrust_setup_af()
130 			return (-1);  in priv_netinet_ipsec_policy_entrust_setup_af()
136 		return (-1);  in priv_netinet_ipsec_policy_entrust_setup_af()
168 		error = -1;  in priv_netinet_ipsec_pfkey()
177 		    -1, EPROTONOSUPPORT);  in priv_netinet_ipsec_pfkey()
183 		    -1, EPROTONOSUPPORT);  in priv_netinet_ipsec_pfkey()
186 		    -1, EPERM);  in priv_netinet_ipsec_pfkey()
213 	error = setsockopt(sd, level, optname,  in priv_netinet_ipsec_policy_bypass_af()
217 		    error, -1, EACCES); /* see ipsec_set_policy */  in priv_netinet_ipsec_policy_bypass_af()
223 		    error, -1, EACCES); /* see ipsec_set_policy */  in priv_netinet_ipsec_policy_bypass_af()
226 		    error, -1, EACCES); /* see ipsec_set_policy */  in priv_netinet_ipsec_policy_bypass_af()
266 	error = setsockopt(sd, level, optname,  in priv_netinet_ipsec_policy_entrust_af()
307 	if (sd >= 0) {  in priv_netinet_ipsec_policy_bypass_cleanup()
308 		close(sd);  in priv_netinet_ipsec_policy_bypass_cleanup()
309 		sd = -1;  in priv_netinet_ipsec_policy_bypass_cleanup()
322 	if (sd >= 0) {  in priv_netinet_ipsec_policy_entrust_cleanup()
323 		close(sd);  in priv_netinet_ipsec_policy_entrust_cleanup()
324 		sd = -1;  in priv_netinet_ipsec_policy_entrust_cleanup()