On Mon, Nov 03, 2014 at 06:10:51PM +0100, Ana Rey wrote: > The new attribute of meta is "cgroup". > > Example of use in nft: > # nft add rule ip test output meta cgroup != 0x100001 counter drop > > Moreover, It adds tests in meta.t test file. > > The kernel support is add in the commit: > netfilter: nft_meta: add cgroup support > > The libnftnl support is add in the commit: > expr: meta: Add cgroup support > > More information about the steps to use cgroup: > https://www.kernel.org/doc/Documentation/cgroups/net_cls.txt > > More info about cgroup in iptables: > http://git.kernel.org/cgit/linux/kernel/git/pablo/nftables.git/commit/net/netfilter/xt_cgroup.c?id=82a37132f300ea53bdcd812917af5a6329ec80c3 Applied, thanks. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
