bugzilla-daemon at bugzilla.netfilter.org
2009-Jul-10  11:20 UTC
[Bug 600] New: ULOG target does not support --log-uid
http://bugzilla.netfilter.org/show_bug.cgi?id=600
           Summary: ULOG target does not support --log-uid
           Product: iptables
           Version: unspecified
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: enhancement
          Priority: P1
         Component: iptables
        AssignedTo: laforge at netfilter.org
        ReportedBy: dom at earth.li
Verified against 1.4.2 (not listed as a version in Bugzilla).
The ULOG target of iptables does not support --log-uid, which makes it
unsuitable for certain applications which require this.
The use case I had in mind was a shared shell server, where it is important to
log the UIDs of certain outbound connections. It's also desirable to log
these
somewhere other than the globally accessible dmesg, for privacy reasons.
It would be great if this could be added in a future release.
Cheers,
Dominic.
-- 
Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
bugzilla-daemon at bugzilla.netfilter.org
2009-Jul-12  14:57 UTC
[Bug 600] ULOG target does not support --log-uid
http://bugzilla.netfilter.org/show_bug.cgi?id=600
jengelh at medozas.de changed:
           What    |Removed                     |Added
----------------------------------------------------------------------------
         AssignedTo|laforge at netfilter.org       |kaber at trash.net
------- Comment #1 from jengelh at medozas.de  2009-07-12 16:57 -------
Should be done in nfnetlink_queue.c instead. Untested patch below, also needs
support on the ulogd side.
-- 
Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
You are the assignee for the bug, or are watching the assignee.
Maybe Matching Threads
- [Bug 591] New: NAT REDIRECT target does not always work
- [Bug 610] New: conntrack doesn't work
- [Bug 718] New: New bugzilla account has no permissions to create bug for conntrack-tools
- [Bug 713] New: CPPFLAGS are mishandled which breaks non-shared targets
- [Bug 586] New: Problems changing the source address of a packet