On Fri, Mar 3, 2017 at 7:45 AM, Florian Westphal <fw@xxxxxxxxx> wrote: > Richard Guy Briggs <rgb@xxxxxxxxxx> wrote: >> > Perhaps I'm missing something here, but let me ask again, how does >> > userspace distinguish between an unset nfmark and a nfmark of >> > 0xffffffff? >> >> It can't. > > It can if you log it as 0, as I asked in patch 1 review. > > (You wouldn't log sk uid of 0 as -1 either, would you?) I want to see the code able to handle the full range of nfmark values as well as the unset case; if that means we need to tweak userspace a bit, please work with Steve on that. -- paul moore www.paul-moore.com -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html