On Fri, 8 Sep 2006, Venkat Yekkirala wrote:
> diff --git a/include/net/ip.h b/include/net/ip.h
> index 98f9084..4646c13 100644
> --- a/include/net/ip.h
> +++ b/include/net/ip.h
> @@ -48,6 +48,9 @@ struct ipcm_cookie
> u32 addr;
> int oif;
>
This labels the skb(s) for locally generated IPv4 traffic. This will
be reconciled with xfrm secid as well as used in pertinent flow control
checks on the outbound later in the LSM hook.
This is not as pretty as it is for IPv6, but what to do?
Note that skb(s) that derive the secmark from the ori