From a08595b2219e6fbd848f07d9bb63c8922c5d97c0 Mon Sep 17 00:00:00 2001 From: Lukasz Pawelczyk Date: Mon, 10 Jun 2019 12:58:56 +0200 Subject: extensions: libxt_owner: Add supplementary groups option The --suppl-groups option causes GIDs specified with --gid-owner to be also checked in the supplementary groups of a process. Signed-off-by: Lukasz Pawelczyk Signed-off-by: Pablo Neira Ayuso --- extensions/libxt_owner.t | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'extensions/libxt_owner.t') diff --git a/extensions/libxt_owner.t b/extensions/libxt_owner.t index aec30b65..2779e5c1 100644 --- a/extensions/libxt_owner.t +++ b/extensions/libxt_owner.t @@ -8,5 +8,9 @@ -m owner --uid-owner 0-10 --gid-owner 0-10;=;OK -m owner ! --uid-owner root;-m owner ! --uid-owner 0;OK -m owner --socket-exists;=;OK +-m owner --gid-owner 0-10 --suppl-groups;=;OK +-m owner --suppl-groups --gid-owner 0-10;;FAIL +-m owner --gid-owner 0-10 ! --suppl-groups;;FAIL +-m owner --suppl-groups;;FAIL :INPUT -m owner --uid-owner root;;FAIL -- cgit v1.2.3