RE: [PATCH 4/7] secid reconciliation-v02: Invoke LSM hook for out bound traffic

On Fri, 8 Sep 2006, Venkat Yekkirala wrote:

quoted

@@ -114,6 +128,9 @@ static struct xt_target xt_connsecmark_t

		.target		= target,
		.targetsize	= sizeof(struct 

xt_connsecmark_target_info),

quoted

		.table		= "mangle",
+		.hooks		= (1 << NF_IP_LOCAL_IN) |
+				  (1 << NF_IP_FORWARD) |
+				  (1 << NF_IP_POST_ROUTING),

Why have you added constraints on the hooks?

This breaks a bunch of things.

I was trying to restrict the module usage to these, but later realized
I really needn't. Will take these out.