On Thu, 28 Sep 2006, Venkat Yekkirala wrote:
> +static inline void security_skb_classify_ipcm(struct sk_buff *skb,
> + struct ipcm_cookie *ipc)
> +{
> + ipc->secid = 0;
> + ipc->secid = skb->secmark;
> +}
You don't need the assignment to 0.
- James
-
This labels the skb(s) for locally generated IPv4 traffic. This will
be used in pertinent flow control checks on the outbound later in the
LSM hook.
This is not as pretty as it is for IPv6, but what to do?
Note that skb(s) that derive the secmark from the originating socket
do so in the outbound h
