Subject: Re: [RFC] SECMARK 1.1

From: Patrick McHardy <[email-masked]>
Date: Mon, 15 May 2006 08:04:46 +0200

James Morris wrote:
> On Mon, 15 May 2006, Patrick McHardy wrote:
> 
> 
>>>>This will load the conntrack modules even if the track flag is not set.
>>>
>>>
>>>I guess need_conntrack() could be moved to checkentry() and only called 
>>>if the track flag is set.
>>
>>
>>That won't help, the function itself does nothing, its just a symbol
>>dependency.
> 
> 
> Not sure what you mean: it will cause ip_conntrack to be loaded, which 
> is needed when you specify the track flag.

Yes, but the reason why it is loaded is because the module loader needs
to resolve the symbol, not because of anything done at module runtime.