| commit | 912ae4dca48094ab1aa52d18e8a78fed75e5bbc2 | [log] [tgz] |
|---|---|---|
| author | Tejun Heo <tj@kernel.org> | Tue Nov 17 14:33:24 2015 -0500 |
| committer | Tejun Heo <tj@kernel.org> | Tue Nov 17 14:33:24 2015 -0500 |
| tree | 2be872fe0bb6326f03f274101ec32fd48bf26b85 | |
| parent | 0690424c97850eb923229b900e16aa16f3a1dce2 [diff] |
netfilter: implement xt_cgroup2 match This patch implements xt_cgroup2 which matches cgroup2 membership of the associated socket. The match is recursive and invertible. For rationales on introducing another cgroup based match, please refer to a preceding commit "sock, cgroup: add sock->sk_cgroup". Signed-off-by: Tejun Heo <tj@kernel.org> Cc: Daniel Borkmann <daniel@iogearbox.net> Cc: Daniel Wagner <daniel.wagner@bmw-carit.de> CC: Neil Horman <nhorman@tuxdriver.com>