diff options
| author | Roman Kubiak <r.kubiak@samsung.com> | 2015-06-16 18:14:47 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2015-06-30 17:30:09 +0200 |
| commit | 46912f1c18e01b63660a56ea7d9c572741e06117 (patch) | |
| tree | 5e86b54ba873569a4dd234665dcd445e6f9ade47 /include/libnetfilter_queue/linux_nfnetlink_queue.h | |
| parent | 9783143905ddceb174dacd1ad94a13ae36bfc4ae (diff) | |
src: add security context information
This commit adds security context information structures
and functions.
This will allow userspace to find the security context of each
packet (if it exists) and make decisions based on that.
It should work for SELinux and SMACK.
Signed-off-by: Roman Kubiak <r.kubiak@samsung.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'include/libnetfilter_queue/linux_nfnetlink_queue.h')
| -rw-r--r-- | include/libnetfilter_queue/linux_nfnetlink_queue.h | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/include/libnetfilter_queue/linux_nfnetlink_queue.h b/include/libnetfilter_queue/linux_nfnetlink_queue.h index 5b6ae95..1975dfa 100644 --- a/include/libnetfilter_queue/linux_nfnetlink_queue.h +++ b/include/libnetfilter_queue/linux_nfnetlink_queue.h @@ -53,6 +53,7 @@ enum nfqnl_attr_type { NFQA_EXP, /* nf_conntrack_netlink.h */ NFQA_UID, /* __u32 sk uid */ NFQA_GID, /* __u32 sk gid */ + NFQA_SECCTX, /* security context string */ __NFQA_MAX }; @@ -106,7 +107,8 @@ enum nfqnl_attr_config { #define NFQA_CFG_F_CONNTRACK (1 << 1) #define NFQA_CFG_F_GSO (1 << 2) #define NFQA_CFG_F_UID_GID (1 << 3) -#define NFQA_CFG_F_MAX (1 << 4) +#define NFQA_CFG_F_SECCTX (1 << 4) +#define NFQA_CFG_F_MAX (1 << 5) /* flags for NFQA_SKB_INFO */ /* packet appears to have wrong checksums, but they are ok */ |