[RFC] SECMARK 1.1

James Morris jmorris at namei.org
Mon May 15 08:22:14 CEST 2006


On Mon, 15 May 2006, Patrick McHardy wrote:

> > Not sure what you mean: it will cause ip_conntrack to be loaded, which 
> > is needed when you specify the track flag.
> 
> 
> Yes, but the reason why it is loaded is because the module loader needs
> to resolve the symbol, not because of anything done at module runtime.

Am I missing something?  This is what I want to happen.  If you specify 
SECMARK --track,  ip_conntrack is to be loaded.


-- 
James Morris
<jmorris at namei.org>



More information about the netfilter-devel mailing list