diff options
| author | Lukasz Pawelczyk <l.pawelczyk@samsung.com> | 2019-06-10 12:58:56 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2019-06-19 13:16:55 +0200 |
| commit | a08595b2219e6fbd848f07d9bb63c8922c5d97c0 (patch) | |
| tree | 33dd7e81ac184b7bcdcd8b9c80069373417acea0 /extensions/libxt_owner.t | |
| parent | ac531b4681d1a0309a738d7bc3408fc2270eaa03 (diff) | |
extensions: libxt_owner: Add supplementary groups option
The --suppl-groups option causes GIDs specified with --gid-owner to be
also checked in the supplementary groups of a process.
Signed-off-by: Lukasz Pawelczyk <l.pawelczyk@samsung.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'extensions/libxt_owner.t')
| -rw-r--r-- | extensions/libxt_owner.t | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/extensions/libxt_owner.t b/extensions/libxt_owner.t index aec30b65..2779e5c1 100644 --- a/extensions/libxt_owner.t +++ b/extensions/libxt_owner.t @@ -8,5 +8,9 @@ -m owner --uid-owner 0-10 --gid-owner 0-10;=;OK -m owner ! --uid-owner root;-m owner ! --uid-owner 0;OK -m owner --socket-exists;=;OK +-m owner --gid-owner 0-10 --suppl-groups;=;OK +-m owner --suppl-groups --gid-owner 0-10;;FAIL +-m owner --gid-owner 0-10 ! --suppl-groups;;FAIL +-m owner --suppl-groups;;FAIL :INPUT -m owner --uid-owner root;;FAIL |