When I list my connections with 'cat /proc/net/nf_conntrack' I get the
SELinux context secmark as a number, like secmark=XXX.
Is there a way I could map that number to the name of the actual context
when I set it up originally with the --selctx option in iptables? If
that is not possible do you plan to include such feature in the upcoming
versions of netfilter?
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html