K 10
svn:author
V 7
thompsa
K 8
svn:date
V 27
2006-06-28T21:57:35.000000Z
K 7
svn:log
V 426
A small race existed where the lock was dropped between when encif was
tested and then set. [1]

Reorganise things to eliminate this, we now ensure that enc0 can not be
destroyed which as the benefit of no longer needing to lock in
ipsec_filter and ipsec_bpf. The cloner will create one interface during the
init so we can guarantee that encif will be valid before any SPD entries are
added to ipsec.

Spotted by:	glebius [1]

END