libipsec: Add support for new policy priority class

diff --git a/src/libipsec/ipsec_policy_mgr.c b/src/libipsec/ipsec_policy_mgr.c
index 02dc59d65b8cb491d61ad17b6b075e00ee393ebc..e2eaba014e1aae01de3f851c765d00917b55e86c 100644 (file)
--- a/src/libipsec/ipsec_policy_mgr.c
+++ b/src/libipsec/ipsec_policy_mgr.c
@@ -22,7 +22,7 @@
 #include <collections/linked_list.h>
 
 /** Base priority for installed policies */
-#define PRIO_BASE 512
+#define PRIO_BASE 384
 
 typedef struct private_ipsec_policy_mgr_t private_ipsec_policy_mgr_t;
 
@@ -88,6 +88,9 @@ static u_int32_t calculate_priority(policy_priority_t policy_priority,
                        priority <<= 1;
                        /* fall-through */
                case POLICY_PRIORITY_DEFAULT:
+                       priority <<= 1;
+                       /* fall-through */
+               case POLICY_PRIORITY_PASS:
                        break;
        }
        /* calculate priority based on selector size, small size = high prio */