From 38228087252c1d5da9dc88a09d3539e9882d808e Mon Sep 17 00:00:00 2001 From: Pablo Neira Ayuso Date: Wed, 21 Apr 2021 01:26:46 +0200 Subject: src: add cgroupsv2 support Add support for matching on the cgroups version 2. Signed-off-by: Pablo Neira Ayuso --- src/parser_bison.y | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) (limited to 'src/parser_bison.y') diff --git a/src/parser_bison.y b/src/parser_bison.y index ce4857b2..b50b6064 100644 --- a/src/parser_bison.y +++ b/src/parser_bison.y @@ -224,6 +224,7 @@ int nft_lex(void *, void *, void *); %token SOCKET "socket" %token TRANSPARENT "transparent" %token WILDCARD "wildcard" +%token CGROUPV2 "cgroupv2" %token TPROXY "tproxy" @@ -4833,7 +4834,11 @@ meta_stmt : META meta_key SET stmt_expr socket_expr : SOCKET socket_key close_scope_socket { - $$ = socket_expr_alloc(&@$, $2); + $$ = socket_expr_alloc(&@$, $2, 0); + } + | SOCKET CGROUPV2 LEVEL NUM close_scope_socket + { + $$ = socket_expr_alloc(&@$, NFT_SOCKET_CGROUPV2, $4); } ; -- cgit v1.2.3