From a08595b2219e6fbd848f07d9bb63c8922c5d97c0 Mon Sep 17 00:00:00 2001 From: Lukasz Pawelczyk Date: Mon, 10 Jun 2019 12:58:56 +0200 Subject: extensions: libxt_owner: Add supplementary groups option The --suppl-groups option causes GIDs specified with --gid-owner to be also checked in the supplementary groups of a process. Signed-off-by: Lukasz Pawelczyk Signed-off-by: Pablo Neira Ayuso --- extensions/libxt_owner.man | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'extensions/libxt_owner.man') diff --git a/extensions/libxt_owner.man b/extensions/libxt_owner.man index 49b58cee..e2479865 100644 --- a/extensions/libxt_owner.man +++ b/extensions/libxt_owner.man @@ -15,5 +15,9 @@ given user. You may also specify a numerical UID, or an UID range. Matches if the packet socket's file structure is owned by the given group. You may also specify a numerical GID, or a GID range. .TP +\fB\-\-suppl\-groups\fP +Causes group(s) specified with \fB\-\-gid-owner\fP to be also checked in the +supplementary groups of a process. +.TP [\fB!\fP] \fB\-\-socket\-exists\fP Matches if the packet is associated with a socket. -- cgit v1.2.3