nether internal logic follow up 74/63574/6
authorr.kubiak <r.kubiak@samsung.com>
Thu, 24 Mar 2016 13:37:14 +0000 (14:37 +0100)
committerZbigniew Jasinski <z.jasinski@samsung.com>
Wed, 6 Apr 2016 10:05:57 +0000 (12:05 +0200)
commit9e953f0d0ae419416e37ca93d90c1c2d22d1cdbf
tree388597c0c513f3331cc8cb3411e7646b3a472034
parent1def8cec17569950aa0868c913477b78406f3910
nether internal logic follow up

- mark is always int32_t and -1 means that
  no packet marking is done, and the packet
  should go through normal iptables rules

- when not copying packet, address and port
  are zeroed to indicate this in logs

- the builtin privilege for cynara is used
  unless specified in the policy file or
  on the command line NETHER_CYNARA_INTERNET_PRIVILEGE

- new command line parameters for cynara
  backend are "policy" - defines the path
  of the policy file  and "privname" - defines
  the default privilege to use when doing
  cynara checks

Change-Id: I1b4a91685af7f27fff162317a63e15a2d1b7319c
Signed-off-by: Zbigniew Jasinski <z.jasinski@samsung.com>
conf/CMakeLists.txt
conf/file.policy [moved from conf/nether.policy with 100% similarity]
conf/systemd/nether.service
conf/systemd/nether.service.in
include/nether_CynaraBackend.h
include/nether_Netlink.h
include/nether_Types.h
packaging/nether.spec
src/CMakeLists.txt
src/nether_CynaraBackend.cpp
src/nether_Netlink.cpp