iptables - iptables tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	libxt_cgroup2: add support for cgroup2 path matching	Tejun Heo	2015-12-23	1	-13/+20
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This patch updates xt_cgroup so that it supports revision 1 interface which includes cgroup2 path based matching. v3: Folded into xt_cgroup as a new revision interface as suggested by Pablo. v2: cgroup2_match->userspacesize and ->save and man page updated as per Jan. Signed-off-by: Tejun Heo <tj@kernel.org> Cc: Daniel Borkmann <dborkman@redhat.com> Cc: Jan Engelhardt <jengelh@inai.de> Cc: Pablo Neira Ayuso <pablo@netfilter.org> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
*	cgroup, man: improve man-page bits	Daniel Borkmann	2015-04-08	1	-5/+13
\| \| \| \| \| \| \| \|	Document limitations when in use with INPUT until we found a better solution. Also fix up indent in the example section. Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
*	iptables: add libxt_cgroup frontend	Daniel Borkmann	2014-01-04	1	-0/+15
	This patch adds the user space extension/frontend for process matching based on cgroups from the kernel patch entitled "netfilter: xtables: lightweight process control group matching". Signed-off-by: Daniel Borkmann <dborkman@redhat.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>