diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2014-05-16 14:11:05 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2014-05-16 14:11:05 +0200 |
| commit | 01dcfdab11a6583d899bfc34758e8f9996774d21 (patch) | |
| tree | 2d81545c64d27c190bf24ba1266584419df6db78 /extensions/libxt_cgroup.man | |
| parent | 69f3f846807654163bedba2b939f370838ae141c (diff) | |
| parent | 6465867eb48506687872b838b1ddfee61d1a0aeb (diff) | |
Merge branch 'next-3.14'
Diffstat (limited to 'extensions/libxt_cgroup.man')
| -rw-r--r-- | extensions/libxt_cgroup.man | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/extensions/libxt_cgroup.man b/extensions/libxt_cgroup.man new file mode 100644 index 00000000..456a0311 --- /dev/null +++ b/extensions/libxt_cgroup.man @@ -0,0 +1,15 @@ +.TP +[\fB!\fP] \fB\-\-cgroup\fP \fIfwid\fP +Match corresponding cgroup for this packet. + +Can be used to assign particular firewall policies for aggregated +task/jobs on the system. This allows for more fine-grained firewall +policies that only match for a subset of the system's processes. +fwid is the maker set through the net_cls cgroup's id. +.PP +Example: +.PP +iptables \-A OUTPUT \-p tcp \-\-sport 80 \-m cgroup ! \-\-cgroup 1 +\-j DROP +.PP +Available since Linux 3.14. |