linux firewall

man iptables

owner
This module attempts to match various characteristics of the packet creator, for locally-generated packets. It is only
valid in the OUTPUT chain, and even this some packets (such as ICMP ping responses) may have no owner, and hence never
match.

--uid-owner userid
Matches if the packet was created by a process with the given effective user id.

--gid-owner groupid
Matches if the packet was created by a process with the given effective group id.

--pid-owner processid
Matches if the packet was created by a process with the given process id.

--sid-owner sessionid
Matches if the packet was created by a process in the given session group.

--cmd-owner name
Matches if the packet was created by a process with the given command name. (this option is present only if
iptables was compiled under a kernel supporting this feature)

NOTE: pid, sid and command matching are broken on SMP

Tazadna pride v poštev, ker se navezuje na ime programa. Vendar to več ne dela v kernelih nad 2.6.13. So onemogočli, ker baje povzroča napake, pri uporabi dveh ali več procesorjev. Na 2.6.13 še dela normalno.