From e98c6ca0cd66184de43eb4c8cc34114fb72c88f6 Mon Sep 17 00:00:00 2001 From: laforge Date: Thu, 22 Jan 2004 15:04:24 +0000 Subject: split manpages into per-extension manpage snippet (Henrik Nordstrom) add lots of missing manpage snippets (Harald Welte) --- extensions/libip6t_owner.man | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 extensions/libip6t_owner.man (limited to 'extensions/libip6t_owner.man') diff --git a/extensions/libip6t_owner.man b/extensions/libip6t_owner.man new file mode 100644 index 0000000..8a31ca4 --- /dev/null +++ b/extensions/libip6t_owner.man @@ -0,0 +1,21 @@ +This module attempts to match various characteristics of the packet +creator, for locally-generated packets. It is only valid in the +.B OUTPUT +chain, and even this some packets (such as ICMP ping responses) may +have no owner, and hence never match. This is regarded as experimental. +.TP +.BI "--uid-owner " "userid" +Matches if the packet was created by a process with the given +effective user id. +.TP +.BI "--gid-owner " "groupid" +Matches if the packet was created by a process with the given +effective group id. +.TP +.BI "--pid-owner " "processid" +Matches if the packet was created by a process with the given +process id. +.TP +.BI "--sid-owner " "sessionid" +Matches if the packet was created by a process in the given session +group. -- cgit v1.2.3