netfilter on bullseye: matching executable name or pid with nftables

[André Rodier]

Hi,

With iptables, I was able to use the match extension, and create rules 
per program or pid, for isntance:

iptables -A OUTPUT --match owner -p tcp --cmd-owner tinyproxy -j ACCEPT
iptables -A OUTPUT --match owner -p tcp --pid-owner 4554 -j ACCEPT

How can I achieve the same, on Linux, using nftables, please ?

I am using Debian Bullseye

Thanks.

--
𝓐𝓡 - 𝐴𝑛𝑑𝑟𝑒 𝑅𝑜𝑑𝑖𝑒𝑟