1 This module copies security markings from packets to connections
2 (if unlabeled), and from connections back to packets (also only
3 if unlabeled). Typically used in conjunction with SECMARK, it is
9 If the packet has a security marking, copy it to the connection
10 if the connection is not marked.
13 If the packet does not have a security marking, and the connection
14 does, copy the security marking from the connection to the packet.