| .TP | |
| [\fB!\fP] \fB\-\-cgroup\fP \fIfwid\fP | |
| Match corresponding cgroup for this packet. | |
| Can be used to assign particular firewall policies for aggregated | |
| task/jobs on the system. This allows for more fine-grained firewall | |
| policies that only match for a subset of the system's processes. | |
| fwid is the maker set through the net_cls cgroup's id. | |
| .PP | |
| Example: | |
| .PP | |
| iptables \-A OUTPUT \-p tcp \-\-sport 80 \-m cgroup ! \-\-cgroup 1 | |
| \-j DROP | |
| .PP | |
| Available since Linux 3.14. |