summaryrefslogtreecommitdiffstats
path: root/include
diff options
context:
space:
mode:
authorDaniel Borkmann <dborkman@redhat.com>2013-12-23 18:46:29 +0100
committerPablo Neira Ayuso <pablo@netfilter.org>2014-01-04 15:45:34 +0100
commit6465867eb48506687872b838b1ddfee61d1a0aeb (patch)
treec1f4b3f6410bb04461dd7dad76bea3b6f6c7678f /include
parent3cefc136d13f426fd68808ddfd39ada0c90f23db (diff)
iptables: add libxt_cgroup frontend
This patch adds the user space extension/frontend for process matching based on cgroups from the kernel patch entitled "netfilter: xtables: lightweight process control group matching". Signed-off-by: Daniel Borkmann <dborkman@redhat.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'include')
-rw-r--r--include/linux/netfilter/xt_cgroup.h11
1 files changed, 11 insertions, 0 deletions
diff --git a/include/linux/netfilter/xt_cgroup.h b/include/linux/netfilter/xt_cgroup.h
new file mode 100644
index 00000000..943d3a02
--- /dev/null
+++ b/include/linux/netfilter/xt_cgroup.h
@@ -0,0 +1,11 @@
+#ifndef _XT_CGROUP_H
+#define _XT_CGROUP_H
+
+#include <linux/types.h>
+
+struct xt_cgroup_info {
+ __u32 id;
+ __u32 invert;
+};
+
+#endif /* _XT_CGROUP_H */