diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2010-12-18 20:18:49 +0100 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2011-01-16 22:32:40 +0100 |
| commit | fdda1474cc8654430f245b7f01c30e8ff171fa60 (patch) | |
| tree | e9d4a4f3d5a45677c49079aefa13e70541db7f8d /src/conntrack/parse.c | |
| parent | f1456fa807f20bf8dd73ab3ae3312c2e8187f89f (diff) | |
src: add support for CTA_SECCTX
This patch adds support for the new attribute CTA_SECCTX that
supersedes CTA_SECMARK.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'src/conntrack/parse.c')
| -rw-r--r-- | src/conntrack/parse.c | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/src/conntrack/parse.c b/src/conntrack/parse.c index 64e6e93..841693e 100644 --- a/src/conntrack/parse.c +++ b/src/conntrack/parse.c @@ -422,6 +422,20 @@ __parse_helper(const struct nfattr *attr, struct nf_conntrack *ct) set_bit(ATTR_HELPER_NAME, ct->set); } +static void +__parse_secctx(const struct nfattr *attr, struct nf_conntrack *ct) +{ + struct nfattr *tb[CTA_SECCTX_MAX]; + + nfnl_parse_nested(tb, CTA_SECCTX_MAX, attr); + if (!tb[CTA_SECCTX_NAME-1]) + return; + + ct->secctx = strdup(NFA_DATA(tb[CTA_SECCTX-1])); + if (ct->secctx) + set_bit(ATTR_SECCTX, ct->set); +} + int __parse_message_type(const struct nlmsghdr *nlh) { u_int16_t type = NFNL_MSG_TYPE(nlh->nlmsg_type); @@ -521,4 +535,7 @@ void __parse_conntrack(const struct nlmsghdr *nlh, ct->zone = ntohs(*(u_int16_t *)NFA_DATA(cda[CTA_ZONE-1])); set_bit(ATTR_ZONE, ct->set); } + + if (cda[CTA_SECCTX-1]) + __parse_secctx(cda[CTA_SECCTX-1], ct); } |