/* If the packet has a security mark and the connection does not, copy the security mark from the packet to the connection.  */
static void secmark_save(const struct sk_buff *skb)
/* If the packet has a security mark and the connection does not, copy the security mark from the packet to the connection.  */
static void secmark_save(const struct sk_buff *skb)
{
	if (skb->secmark) {
		struct nf_conn *ct;
		enum ip_conntrack_info ctinfo;
		ct = nf_ct_get(skb, &ctinfo);
		if (ct && !ct->secmark) {
			ct->secmark = skb->secmark;
			nf_conntrack_event_cache(IPCT_SECMARK, ct);
		}
	}
}