diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2021-04-21 01:26:46 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2021-05-03 00:18:04 +0200 |
| commit | 38228087252c1d5da9dc88a09d3539e9882d808e (patch) | |
| tree | 71e975e946db1b3b1421cf52df3e8bedac941aef /src/parser_bison.y | |
| parent | 80440b227b0013eb5c0eae8ceb3af2fbba267619 (diff) | |
src: add cgroupsv2 support
Add support for matching on the cgroups version 2.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'src/parser_bison.y')
| -rw-r--r-- | src/parser_bison.y | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/src/parser_bison.y b/src/parser_bison.y index ce4857b2..b50b6064 100644 --- a/src/parser_bison.y +++ b/src/parser_bison.y @@ -224,6 +224,7 @@ int nft_lex(void *, void *, void *); %token SOCKET "socket" %token TRANSPARENT "transparent" %token WILDCARD "wildcard" +%token CGROUPV2 "cgroupv2" %token TPROXY "tproxy" @@ -4833,7 +4834,11 @@ meta_stmt : META meta_key SET stmt_expr socket_expr : SOCKET socket_key close_scope_socket { - $$ = socket_expr_alloc(&@$, $2); + $$ = socket_expr_alloc(&@$, $2, 0); + } + | SOCKET CGROUPV2 LEVEL NUM close_scope_socket + { + $$ = socket_expr_alloc(&@$, NFT_SOCKET_CGROUPV2, $4); } ; |