Re: How to Achieve Functionality Equivalent to iptables -m owner --socket-exist in nft?
Sunny73Cr <[email protected]> Tue, 15 Apr 2025 20:24:31 +0000
| Newsgroups | gmane.comp.security.firewalls.netfilter.general |
|---|---|
| Message-ID | <9bsxFpl1jZK-Q-1fvltsQ9TIJQbKJLLZ2BOKaF1HF8AAaaczi4Nazmyc_joMqUNu_Gbnii28h2OAIrFKNJyfOXU-C6si-ocGfhl9nabaQrM=@protonmail.com> |
> iptables -m owner --socket-exist You may be looking for 'meta skuid'; you'll need the user ID that 'owns' a 'service'. You can `cat /etc/passwd` to find this information. 'meta skuid' will match a packet that is destined to or sourced from a socket that is owned by the user id that you specify. Try `su -l [username] -c "[executable path]"` to run a program as another user; if it does not do so already. Regards, sunny