Jan Engelhardt wrote:
+static void owner_mt_help(void) +{ + printf( +"owner match v%s options:\n" +"[!] --uid-owner userid Match local UID\n" +"[!] --gid-owner groupid Match local GID\n" +"[!] --socket-exists Match if socket exists\n" +"[!] --filp-exists Match if filp exists\n" +"\n", +IPTABLES_VERSION);
The filp-exists option strikes me as useless, what would the use case be? For the socket-exists option, I'd prefer for the owner match to simply accept no further option, i.e. "-m owner". - To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html