xref: /aosp_15_r20/external/iptables/extensions/libxt_CONNSECMARK.man (revision a71a954618bbadd4a345637e5edcf36eec826889)
1*a71a9546SAutomerger Merge WorkerThis module copies security markings from packets to connections
2*a71a9546SAutomerger Merge Worker(if unlabeled), and from connections back to packets (also only
3*a71a9546SAutomerger Merge Workerif unlabeled).  Typically used in conjunction with SECMARK, it is
4*a71a9546SAutomerger Merge Workervalid in the
5*a71a9546SAutomerger Merge Worker.B security
6*a71a9546SAutomerger Merge Workertable (for backwards compatibility with older kernels, it is also
7*a71a9546SAutomerger Merge Workervalid in the
8*a71a9546SAutomerger Merge Worker.B mangle
9*a71a9546SAutomerger Merge Workertable).
10*a71a9546SAutomerger Merge Worker.TP
11*a71a9546SAutomerger Merge Worker\fB\-\-save\fP
12*a71a9546SAutomerger Merge WorkerIf the packet has a security marking, copy it to the connection
13*a71a9546SAutomerger Merge Workerif the connection is not marked.
14*a71a9546SAutomerger Merge Worker.TP
15*a71a9546SAutomerger Merge Worker\fB\-\-restore\fP
16*a71a9546SAutomerger Merge WorkerIf the packet does not have a security marking, and the connection
17*a71a9546SAutomerger Merge Workerdoes, copy the security marking from the connection to the packet.
18*a71a9546SAutomerger Merge Worker
19