summaryrefslogtreecommitdiff
path: root/include/uapi/linux/netfilter
diff options
context:
space:
mode:
authorEric Sage <eric_sage@apple.com>2023-03-27 20:44:49 +0300
committerFlorian Westphal <fw@strlen.de>2023-03-30 23:20:09 +0300
commit28c1b6df436819a7ed8a781835766e45139771a3 (patch)
treed3eba937576b89d134609839039ee20f78c5d07e /include/uapi/linux/netfilter
parent356e2adb3f3b9fe4427224eec2f8819a3078665f (diff)
downloadlinux-28c1b6df436819a7ed8a781835766e45139771a3.tar.xz
netfilter: nfnetlink_queue: enable classid socket info retrieval
This enables associating a socket with a v1 net_cls cgroup. Useful for applying a per-cgroup policy when processing packets in userspace. Signed-off-by: Eric Sage <eric_sage@apple.com> Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'include/uapi/linux/netfilter')
-rw-r--r--include/uapi/linux/netfilter/nfnetlink_queue.h1
1 files changed, 1 insertions, 0 deletions
diff --git a/include/uapi/linux/netfilter/nfnetlink_queue.h b/include/uapi/linux/netfilter/nfnetlink_queue.h
index ef7c97f21a15..efcb7c044a74 100644
--- a/include/uapi/linux/netfilter/nfnetlink_queue.h
+++ b/include/uapi/linux/netfilter/nfnetlink_queue.h
@@ -62,6 +62,7 @@ enum nfqnl_attr_type {
NFQA_VLAN, /* nested attribute: packet vlan info */
NFQA_L2HDR, /* full L2 header */
NFQA_PRIORITY, /* skb->priority */
+ NFQA_CGROUP_CLASSID, /* __u32 cgroup classid */
__NFQA_MAX
};