diff options
| author | Kevin Krakauer <krakauer@google.com> | 2020-02-14 17:19:32 -0800 |
|---|---|---|
| committer | Kevin Krakauer <krakauer@google.com> | 2020-02-26 11:04:00 -0800 |
| commit | 408979e619c4b5df74503c7a887aaaa06fd0d730 (patch) | |
| tree | 45c8cae6cad967802f28defd96a72a8f5f308771 /pkg/sentry/platform/ptrace/subprocess_linux.go | |
| parent | b8f56c79be40d9c75f4e2f279c9d821d1c1c3569 (diff) | |
iptables: filter by IP address (and range)
Enables commands such as:
$ iptables -A INPUT -d 127.0.0.1 -j ACCEPT
$ iptables -t nat -A PREROUTING ! -d 127.0.0.1 -j REDIRECT
Also adds a bunch of REDIRECT+destination tests.
Diffstat (limited to 'pkg/sentry/platform/ptrace/subprocess_linux.go')
0 files changed, 0 insertions, 0 deletions