[Bug 1704] Feature request - support missing and exists keywords for meta skuid

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Tue Sep 26 17:42:31 CEST 2023


https://bugzilla.netfilter.org/show_bug.cgi?id=1704

--- Comment #1 from Pablo Neira Ayuso <pablo at netfilter.org> ---
Hi,

meta skuid datatype is a 32-bits unsiugned integer:

# nft describe meta skuid
meta expression, datatype uid (user ID) (basetype integer), 32 bits

not a boolean type.

> According to the nft(8) man page (https://man.archlinux.org
> /man/nft.8.en#BOOLEAN_TYPE), it is possible to only check the existence of
> `fib`, `exthdr`, and `tcp option` of a packet.

Yes, these selector might return a boolean, but not meta skuid.

What is the intention? Are you aiming at checking if the skbuff is attached to
a socket?

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20230926/dedd540a/attachment.html>


More information about the netfilter-buglog mailing list