--- linux-2.5.45/include/net/xfrm.h	2002-10-30 16:42:22.000000000 -0800
+++ linux/include/net/xfrm.h	2002-10-31 02:48:20.000000000 -0800
@@ -338,12 +338,14 @@
 }
 
 extern void __secpath_destroy(struct sec_path *sp);
+extern void secpath_destroy_noop(struct sec_path *sp);
+extern void (*secpath_destroy_hook)(struct sec_path *sp);
 
 static inline void
 secpath_put(struct sec_path *sp)
 {
 	if (sp && atomic_dec_and_test(&sp->refcnt))
-		__secpath_destroy(sp);
+		(*secpath_destroy_hook)(sp);
 }
 
 extern int __xfrm_policy_check(int dir, struct sk_buff *skb);
--- linux-2.5.45/net/core/Makefile	2002-10-30 16:43:43.000000000 -0800
+++ linux/net/core/Makefile	2002-10-31 00:31:25.000000000 -0800
@@ -2,6 +2,8 @@
 # Makefile for the Linux networking core.
 #
 
+export-objs := dev.o netfilter.o profile.o skbuff.o
+
 obj-y := sock.o skbuff.o iovec.o datagram.o scm.o
 
 ifeq ($(CONFIG_SYSCTL),y)
--- linux-2.5.45/net/core/skbuff.c	2002-10-30 16:43:08.000000000 -0800
+++ linux/net/core/skbuff.c	2002-10-31 00:31:25.000000000 -0800
@@ -38,6 +38,7 @@
  */
 
 #include <linux/config.h>
+#include <linux/module.h>
 #include <linux/types.h>
 #include <linux/kernel.h>
 #include <linux/sched.h>
@@ -1218,11 +1219,22 @@
 }
 #endif
 
+void
+secpath_destroy_noop (struct sec_path *sp)
+{
+	return;
+}
+EXPORT_SYMBOL(secpath_destroy_noop);
+
+void (*secpath_destroy_hook)(struct sec_path *sp) = secpath_destroy_noop;
+EXPORT_SYMBOL(secpath_destroy_hook);
+
 void __init skb_init(void)
 {
 	int i;
--- linux-2.5.45/net/ipv4/af_inet.c	2002-10-30 16:41:56.000000000 -0800
+++ linux/net/ipv4/af_inet.c	2002-11-01 03:31:37.000000000 -0800
@@ -105,16 +105,17 @@
 #include <linux/skbuff.h>
 #include <linux/proc_fs.h>
 #include <linux/seq_file.h>
 #include <net/sock.h>
 #include <net/raw.h>
 #include <net/icmp.h>
 #include <net/ipip.h>
 #include <net/inet_common.h>
+#include <net/xfrm.h>
 #ifdef CONFIG_IP_MROUTE
 #include <linux/mroute.h>
 #endif
 
 struct linux_mib net_statistics[NR_CPUS * 2];
 
 #ifdef INET_REFCNT_DEBUG
 atomic_t inet_sock_nr;
@@ -1054,16 +1055,18 @@
 static int __init inet_init(void)
 {
 	struct sk_buff *dummy_skb;
 	struct inet_protosw *q;
 	struct list_head *r;
 
 	printk(KERN_INFO "NET4: Linux TCP/IP 1.0 for NET4.0\n");
 
+	secpath_destroy_hook = __secpath_destroy;
+
 	if (sizeof(struct inet_skb_parm) > sizeof(dummy_skb->cb)) {
 		printk(KERN_CRIT "inet_proto_init: panic\n");
 		return -EINVAL;
 	}
 
 	tcp_sk_cachep = kmem_cache_create("tcp_sock",
 					  sizeof(struct tcp_sock), 0,
 					  SLAB_HWCACHE_ALIGN, 0, 0);