path: root/extensions/libxt_owner.t
diff options
authorLukasz Pawelczyk <>2019-06-10 12:58:56 +0200
committerPablo Neira Ayuso <>2019-06-19 13:16:55 +0200
commita08595b2219e6fbd848f07d9bb63c8922c5d97c0 (patch)
tree33dd7e81ac184b7bcdcd8b9c80069373417acea0 /extensions/libxt_owner.t
parentac531b4681d1a0309a738d7bc3408fc2270eaa03 (diff)
extensions: libxt_owner: Add supplementary groups option
The --suppl-groups option causes GIDs specified with --gid-owner to be also checked in the supplementary groups of a process. Signed-off-by: Lukasz Pawelczyk <> Signed-off-by: Pablo Neira Ayuso <>
Diffstat (limited to 'extensions/libxt_owner.t')
1 files changed, 4 insertions, 0 deletions
diff --git a/extensions/libxt_owner.t b/extensions/libxt_owner.t
index aec30b65..2779e5c1 100644
--- a/extensions/libxt_owner.t
+++ b/extensions/libxt_owner.t
@@ -8,5 +8,9 @@
-m owner --uid-owner 0-10 --gid-owner 0-10;=;OK
-m owner ! --uid-owner root;-m owner ! --uid-owner 0;OK
-m owner --socket-exists;=;OK
+-m owner --gid-owner 0-10 --suppl-groups;=;OK
+-m owner --suppl-groups --gid-owner 0-10;;FAIL
+-m owner --gid-owner 0-10 ! --suppl-groups;;FAIL
+-m owner --suppl-groups;;FAIL
-m owner --uid-owner root;;FAIL