diff options
| author | Lukasz Pawelczyk <l.pawelczyk@samsung.com> | 2019-06-10 12:58:56 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2019-06-19 13:16:55 +0200 |
| commit | a08595b2219e6fbd848f07d9bb63c8922c5d97c0 (patch) | |
| tree | 33dd7e81ac184b7bcdcd8b9c80069373417acea0 /extensions/libxt_owner.man | |
| parent | ac531b4681d1a0309a738d7bc3408fc2270eaa03 (diff) | |
extensions: libxt_owner: Add supplementary groups option
The --suppl-groups option causes GIDs specified with --gid-owner to be
also checked in the supplementary groups of a process.
Signed-off-by: Lukasz Pawelczyk <l.pawelczyk@samsung.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'extensions/libxt_owner.man')
| -rw-r--r-- | extensions/libxt_owner.man | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/extensions/libxt_owner.man b/extensions/libxt_owner.man index 49b58cee..e2479865 100644 --- a/extensions/libxt_owner.man +++ b/extensions/libxt_owner.man @@ -15,5 +15,9 @@ given user. You may also specify a numerical UID, or an UID range. Matches if the packet socket's file structure is owned by the given group. You may also specify a numerical GID, or a GID range. .TP +\fB\-\-suppl\-groups\fP +Causes group(s) specified with \fB\-\-gid-owner\fP to be also checked in the +supplementary groups of a process. +.TP [\fB!\fP] \fB\-\-socket\-exists\fP Matches if the packet is associated with a socket. |