diff options
| author | Mark Montague <mark@catseye.org> | 2011-04-04 14:54:52 +0200 |
|---|---|---|
| committer | Patrick McHardy <kaber@trash.net> | 2011-04-04 14:54:52 +0200 |
| commit | df37d99b0cba63443d4224187f2d5a0c299ad7ad (patch) | |
| tree | e6ad8ad0c3d1618a1a236af90683242d8cf1841c /extensions/libxt_SECMARK.man | |
| parent | c7948744bf591e0c46b6d19ccfa408cc59e11ef1 (diff) | |
iptables: documentation for iptables and ip6tables "security" tables
Add documentation for the iptables and ip6tables "security" tables.
Based on http://lwn.net/Articles/267140/ and kernel source.
Signed-off-by: Mark Montague <mark@catseye.org>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Diffstat (limited to 'extensions/libxt_SECMARK.man')
| -rw-r--r-- | extensions/libxt_SECMARK.man | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/extensions/libxt_SECMARK.man b/extensions/libxt_SECMARK.man index e44efced..d0e6fd64 100644 --- a/extensions/libxt_SECMARK.man +++ b/extensions/libxt_SECMARK.man @@ -1,7 +1,10 @@ This is used to set the security mark value associated with the -packet for use by security subsystems such as SELinux. It is only +packet for use by security subsystems such as SELinux. It is +valid in the +.B security +table (for backwards compatibility with older kernels, it is also valid in the .B mangle -table. The mark is 32 bits wide. +table). The mark is 32 bits wide. .TP \fB\-\-selctx\fP \fIsecurity_context\fP |