As for now we only support dumping. This patch adds support to change
the secmark from ctnetlink.
Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
--
"Los honestos son inadaptados sociales" -- Les Luthiers
[PATCH] add support for modifying secmark via ctnetlink
As for now we only support dumping. This patch adds support to change
the secmark from ctnetlink.
Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
Index: net-2.6.git/net/netfilter/nf_conntrack_netlink.c
===================================================================
--- net-2.6.git.orig/net/netfilter/nf_conntrack_netlink.c 2008-05-20 22:10:31.000000000 +0200
+++ net-2.6.git/net/netfilter/nf_conntrack_netlink.c 2008-05-20 22:10:56.000000000 +0200
@@ -1121,6 +1121,11 @@ ctnetlink_change_conntrack(struct nf_con
ct->mark = ntohl(nla_get_be32(cda[CTA_MARK]));
#endif
+#if defined(CONFIG_NF_CONNTRACK_SECMARK)
+ if (cda[CTA_SECMARK])
+ ct->secmark = ntohl(nla_get_be32(cda[CTA_SECMARK]));
+#endif
+
#ifdef CONFIG_NF_NAT_NEEDED
if (cda[CTA_NAT_SEQ_ADJ_ORIG] || cda[CTA_NAT_SEQ_ADJ_REPLY]) {
err = ctnetlink_change_nat_seq_adj(ct, cda);
