From: Casey Schaufler <casey at schaufler-ca.com> Date: Thu, 22 Aug 2019 13:35:01 -0700 > If the secmark where replaced by a security blob, the u32 secmark field > in an sk_buff would be replaced by a void * security field. You can already use the secmark to hash to some kind of pointer or other object.