Skip to content

Add support for network policy based on secmark labels

Matthew Garrett requested to merge mjg59/apparmor:network into master

Extend network rules such that they can have a label= argument that matches off secmark rules. If a rule has a label argument then it will be matched by any packets meeting those conditions and having the appropriate secmark label.

Edited by Matthew Garrett

Merge request reports