History

netfilter: nft_meta: add cgroup support

This allows you to filter traffic by process control group (cgroup).

Ana Rey committed 12 years ago

Commit ce674171 parent c5a589c2 files · +9 −0Browse files

Showing the changes to include/uapi/linux (1 of 2 files). Show all

Unified · Split

include/uapi/linux/netfilter/nf_tables.h+2−0
@@ -579,6 +579,7 @@ enum nft_exthdr_attributes { · 578 unmodified lines
579 * @NFT_META_CPU: cpu id through smp_processor_id()579 * @NFT_META_CPU: cpu id through smp_processor_id()
580 * @NFT_META_IIFGROUP: packet input interface group580 * @NFT_META_IIFGROUP: packet input interface group
581 * @NFT_META_OIFGROUP: packet output interface group581 * @NFT_META_OIFGROUP: packet output interface group
582 * @NFT_META_CGROUP: socket control group (skb->sk->sk_classid)
582 */583 */
583enum nft_meta_keys {584enum nft_meta_keys {
584 NFT_META_LEN,585 NFT_META_LEN,
@@ -604,6 +605,7 @@ enum nft_meta_keys { · 19 unmodified lines
604 NFT_META_CPU,605 NFT_META_CPU,
605 NFT_META_IIFGROUP,606 NFT_META_IIFGROUP,
606 NFT_META_OIFGROUP,607 NFT_META_OIFGROUP,
608 NFT_META_CGROUP,
607};609};
608 610
609/**611/**