From fdda1474cc8654430f245b7f01c30e8ff171fa60 Mon Sep 17 00:00:00 2001 From: Pablo Neira Ayuso Date: Sat, 18 Dec 2010 20:18:49 +0100 Subject: src: add support for CTA_SECCTX This patch adds support for the new attribute CTA_SECCTX that supersedes CTA_SECMARK. Signed-off-by: Pablo Neira Ayuso --- src/conntrack/compare.c | 10 ++++++++++ 1 file changed, 10 insertions(+) (limited to 'src/conntrack/compare.c') diff --git a/src/conntrack/compare.c b/src/conntrack/compare.c index 134cefd..1cdad1c 100644 --- a/src/conntrack/compare.c +++ b/src/conntrack/compare.c @@ -368,6 +368,14 @@ cmp_zone(const struct nf_conntrack *ct1, return (ct1->zone == ct2->zone); } +static int +cmp_secctx(const struct nf_conntrack *ct1, + const struct nf_conntrack *ct2, + unsigned int flags) +{ + return strcmp(ct1->secctx, ct2->secctx) == 0; +} + static int cmp_meta(const struct nf_conntrack *ct1, const struct nf_conntrack *ct2, unsigned int flags) @@ -388,6 +396,8 @@ static int cmp_meta(const struct nf_conntrack *ct1, return 0; if (!__cmp(ATTR_ZONE, ct1, ct2, flags, cmp_zone)) return 0; + if (!__cmp(ATTR_SECCTX, ct1, ct2, flags, cmp_secctx)) + return 0; return 1; } -- cgit v1.2.3