On Mon, 2019-05-06 at 00:59 +0200, Pablo Neira Ayuso wrote: > On Fri, Apr 26, 2019 at 06:02:57PM +0200, Lukasz Pawelczyk wrote: > > The --compl-groups option causes GIDs specified with --gid-owner to > > be > > also checked in the complementary groups of a process. > > Please, could you also update manpage? Will do. iptables-extensions(8) I presume? Anything else? > BTW, I think you refer to _supplementary_ groups, right? Existing > documentation uses this term. Yes, that's correct, my bad. I'll send the updated patches. Thanks. -- Lukasz Pawelczyk Samsung R&D Institute Poland Samsung Electronics