Re: [PATCH] nftables: add support for setting secmark

2018-10-15 Thread Pablo Neira Ayuso
On Thu, Sep 20, 2018 at 09:43:22AM +0200, Christian Göttsche wrote: > Add support for new nft object secmark holding security context strings. > > The following should demonstrate its usage (based on SELinux context): > > # define a tag containing a context string > nft add secmark inet

Re: [PATCH] nftables: add support for setting secmark

2018-10-08 Thread Pablo Neira Ayuso
On Thu, Sep 20, 2018 at 09:43:22AM +0200, Christian Göttsche wrote: > Add support for new nft object secmark holding security context strings. > > The following should demonstrate its usage (based on SELinux context): > > # define a tag containing a context string > nft add secmark inet

[PATCH] nftables: add support for setting secmark

2018-09-20 Thread Christian Göttsche
Add support for new nft object secmark holding security context strings. The following should demonstrate its usage (based on SELinux context): # define a tag containing a context string nft add secmark inet filter sshtag \"system_u:object_r:ssh_server_packet_t:s0\" nft list