/* If packet has no security mark, and the connection does, restore the security mark from the connection to the packet.  */
static void secmark_restore(struct sk_buff *skb)
/* If packet has no security mark, and the connection does, restore the security mark from the connection to the packet.  */
static void secmark_restore(struct sk_buff *skb)
{
	if (!skb->secmark) {
		const struct nf_conn *ct;
		enum ip_conntrack_info ctinfo;
		ct = nf_ct_get(skb, &ctinfo);
		if (ct && ct->secmark)
			skb->secmark = ct->secmark;
	}
}