Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67;
Message-ID: <d071578df35b11b858752f014f4ae5923b61be49.camel@samsung.com>
Subject: Re: [PATCH] extensions: libxt_owner: Add complementary groups
 option
From:   Lukasz Pawelczyk <l.pawelczyk@samsung.com>
To:     Pablo Neira Ayuso <pablo@netfilter.org>
Cc:     Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>,
        Florian Westphal <fw@strlen.de>,
        "David S. Miller" <davem@davemloft.net>,
        netfilter-devel@vger.kernel.org, coreteam@netfilter.org,
        netdev@vger.kernel.org, linux-kernel@vger.kernel.org,
        Lukasz Pawelczyk <havner@gmail.com>
Date:   Tue, 07 May 2019 15:24:43 +0200
In-Reply-To: <20190505225930.w4bcrlsgzq7cipvg@salvia>
User-Agent: Evolution 3.30.5 (3.30.5-1.fc29) 
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="utf-8"
CMS-TYPE: 201P
References: <CGME20190426160306eucas1p1a0c8ec9783cc78db7381582a70d6de10@eucas1p1.samsung.com>
        <20190426160257.4139-1-l.pawelczyk@samsung.com>
        <20190505225930.w4bcrlsgzq7cipvg@salvia>
Sender: linux-kernel-owner@vger.kernel.org
Precedence: bulk

On Mon, 2019-05-06 at 00:59 +0200, Pablo Neira Ayuso wrote:
> On Fri, Apr 26, 2019 at 06:02:57PM +0200, Lukasz Pawelczyk wrote:
> > The --compl-groups option causes GIDs specified with --gid-owner to
> > be
> > also checked in the complementary groups of a process.
> 
> Please, could you also update manpage?

Will do. iptables-extensions(8) I presume? Anything else?

> BTW, I think you refer to _supplementary_ groups, right? Existing
> documentation uses this term.

Yes, that's correct, my bad. I'll send the updated patches.

Thanks.


-- 
Lukasz Pawelczyk
Samsung R&D Institute Poland
Samsung Electronics