iptables -t filter -A INPUT -m cgroup --cgroup 65537 -j ACCEPT
iptables -t filter -A INPUT -m cgroup --cgroup 2712847316 -j ACCEPT
iptables -t filter -A INPUT -m cgroup ! --cgroup 32769 -j REJECT
iptables -t filter -A INPUT -m cgroup ! --cgroup 101 -j REJECT
iptables -t filter -A INPUT -m cgroup --cgroup 1010 -j DROP
iptables -t filter -A INPUT -m cgroup --cgroup 1048592 -j DROP
iptables -t filter -A INPUT -m cgroup --path foo/bar -j ACCEPT
iptables -t filter -A INPUT -m cgroup ! --path foo/bar -j REJECT
iptables -t filter -A INPUT -m cgroup --path foo/bar -j ACCEPT
iptables -t filter -A INPUT -m cgroup --path baz/qux -j ACCEPT
|