diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2010-12-18 20:18:49 +0100 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2011-01-16 22:32:40 +0100 |
| commit | fdda1474cc8654430f245b7f01c30e8ff171fa60 (patch) | |
| tree | e9d4a4f3d5a45677c49079aefa13e70541db7f8d /src/conntrack/snprintf_default.c | |
| parent | f1456fa807f20bf8dd73ab3ae3312c2e8187f89f (diff) | |
src: add support for CTA_SECCTX
This patch adds support for the new attribute CTA_SECCTX that
supersedes CTA_SECMARK.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'src/conntrack/snprintf_default.c')
| -rw-r--r-- | src/conntrack/snprintf_default.c | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/src/conntrack/snprintf_default.c b/src/conntrack/snprintf_default.c index 4a61f8a..abb9d9f 100644 --- a/src/conntrack/snprintf_default.c +++ b/src/conntrack/snprintf_default.c @@ -225,6 +225,12 @@ __snprintf_zone(char *buf, unsigned int len, const struct nf_conntrack *ct) return (snprintf(buf, len, "zone=%u ", ct->zone)); } +static int +__snprintf_secctx(char *buf, unsigned int len, const struct nf_conntrack *ct) +{ + return (snprintf(buf, len, "secctx=%s ", ct->secctx)); +} + int __snprintf_conntrack_default(char *buf, unsigned int len, const struct nf_conntrack *ct, @@ -321,6 +327,11 @@ int __snprintf_conntrack_default(char *buf, BUFFER_SIZE(ret, size, len, offset); } + if (test_bit(ATTR_SECCTX, ct->set)) { + ret = __snprintf_secctx(buf+offset, len, ct); + BUFFER_SIZE(ret, size, len, offset); + } + if (test_bit(ATTR_ZONE, ct->set)) { ret = __snprintf_zone(buf+offset, len, ct); BUFFER_SIZE(ret, size, len, offset); |