Allow to match on the cgroupsv2 id from ancestor level.
Showing the changes to include/uapi (1 of 2 files). Show all
Unified · Split
| @@ -1014,11 +1014,13 @@ enum nft_rt_attributes { · 1013 unmodified lines | ||
| 1014 | 1014 | * |
| 1015 | 1015 | * @NFTA_SOCKET_KEY: socket key to match |
| 1016 | 1016 | * @NFTA_SOCKET_DREG: destination register |
| 1017 | + * @NFTA_SOCKET_LEVEL: cgroups2 ancestor level (only for cgroupsv2) | |
| 1017 | 1018 | */ |
| 1018 | 1019 | enum nft_socket_attributes { |
| 1019 | 1020 | NFTA_SOCKET_UNSPEC, |
| 1020 | 1021 | NFTA_SOCKET_KEY, |
| 1021 | 1022 | NFTA_SOCKET_DREG, |
| 1023 | + NFTA_SOCKET_LEVEL, | |
| 1022 | 1024 | __NFTA_SOCKET_MAX |
| 1023 | 1025 | }; |
| 1024 | 1026 | #define NFTA_SOCKET_MAX (__NFTA_SOCKET_MAX - 1) |
| @@ -1029,11 +1031,13 @@ enum nft_socket_attributes { · 4 unmodified lines | ||
| 1029 | 1031 | * @NFT_SOCKET_TRANSPARENT: Value of the IP(V6)_TRANSPARENT socket option |
| 1030 | 1032 | * @NFT_SOCKET_MARK: Value of the socket mark |
| 1031 | 1033 | * @NFT_SOCKET_WILDCARD: Whether the socket is zero-bound (e.g. 0.0.0.0 or ::0) |
| 1034 | + * @NFT_SOCKET_CGROUPV2: Match on cgroups version 2 | |
| 1032 | 1035 | */ |
| 1033 | 1036 | enum nft_socket_keys { |
| 1034 | 1037 | NFT_SOCKET_TRANSPARENT, |
| 1035 | 1038 | NFT_SOCKET_MARK, |
| 1036 | 1039 | NFT_SOCKET_WILDCARD, |
| 1040 | + NFT_SOCKET_CGROUPV2, | |
| 1037 | 1041 | __NFT_SOCKET_MAX |
| 1038 | 1042 | }; |
| 1039 | 1043 | #define NFT_SOCKET_MAX (__NFT_SOCKET_MAX - 1) |