On Wed, 20 Sep 2006, Venkat Yekkirala wrote:
> > Quite a lot of logic has changed here.
> >
> > With the original code, we only restored a secmark once for
> > the lifetime
> > of a packet or connetcion (to make behavior deterministic and
> > security
> > marks immutable in the face of arbitr
See below.
> -Original Message-
> From: James Morris [mailto:[EMAIL PROTECTED]
> Sent: Monday, September 18, 2006 2:12 PM
> To: Venkat Yekkirala
> Cc: netdev@vger.kernel.org; [EMAIL PROTECTED]; [EMAIL PROTECTED];
> [EMAIL PROTECTED]
> Subject: Re: [PATCH 4/7] secid reconciliation-v02: Invo
> On Fri, 8 Sep 2006, Venkat Yekkirala wrote:
>
> > @@ -114,6 +128,9 @@ static struct xt_target xt_connsecmark_t
> > .target = target,
> > .targetsize = sizeof(struct
> xt_connsecmark_target_info),
> > .table = "mangle",
> > + .ho
