Hi Daniel,

Please help.

Per session iptables rules in the file "session-overview.txt":
iptables -t mangle -A OUTPUT -m owner [--uid-owner|--gid-owner] $OWNER \
      -j MARK --set-mark $MARK

For example:
iptables -t mangle -A OUTPUT -m owner 1.1 \
      -j MARK --set-mark 258

A APP creates a session, and uses the above rule to route the network.

In this APP, if I create a socket to access the internet, I don't
understand
how kernel knows this socket has created by user 1.1 , and can access the
internet.


Thanks a lot.

Chengyi



2013/12/16 Daniel Wagner <[email protected]>

> Hi,
>
> On 12/13/2013 09:34 AM, Daniel Wagner wrote:
> > From: Daniel Wagner <[email protected]>
> >
> > Hi,
> >
> > v2:
> >       - Rebases to current head
> >       - Fixed disconnect services when last session disconnects().
> >         This is done by calling __connman_session_auto_connect().
> > v1:
> >       - Reworked according Patrik's feedback
> >         Moved all session related code to session.c
> > v0:
> >       - Initial version
>
> As usual I have updated now the github tree with these patches. For
> additional fun, there are 4 patches on top which gives you the
> named service and filter out feature.
>
> https://github.com/bmwcarit/connman/tree/policy-services-v7
>
> cheers,
> daniel
>
> _______________________________________________
> connman mailing list
> [email protected]
> https://lists.connman.net/mailman/listinfo/connman
>
_______________________________________________
connman mailing list
[email protected]
https://lists.connman.net/mailman/listinfo/connman

Reply via email to