On Tue, Jun 16, 2015 at 06:14:47PM +0200, Roman Kubiak wrote:
> Below is a complete libnetfilter_queue patch:
>
>
> [PATCH] libnetfilter_queue: add security context information
>
> This commit adds security context information structures
> and functions.
>
> This will allow userspace to find the security context of each
> packet (if it exists) and make decisions based on that.
> It should work for SELinux and SMACK.
Applied with minor glitch. Thanks.
> @@ -76,7 +80,7 @@ static int cb(struct nfq_q_handle *qh, struct nfgenmsg *nfmsg,
> {
> uint32_t id = print_pkt(nfa);
> printf("entering callback\n");
> - return nfq_set_verdict(qh, id, NF_ACCEPT, 0, NULL);
> + return nfq_set_verdict2(qh, id, NF_ACCEPT, 0x3, 0, NULL);
I have kept back this chunk to set the packet mark to 3. It doesn't
belong here.
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
