Blame bootstrap_ver/extensions/libxt_cgroup.txlate

Packit Service 2cd632
iptables-translate -t filter -A INPUT -m cgroup --cgroup 0 -j ACCEPT
Packit Service 2cd632
nft add rule ip filter INPUT meta cgroup 0 counter accept
Packit Service 2cd632
Packit Service 2cd632
iptables-translate -t filter -A INPUT -m cgroup ! --cgroup 0 -j ACCEPT
Packit Service 2cd632
nft add rule ip filter INPUT meta cgroup != 0 counter accept