	Ported from Marc Boucher's ipv4 version

This patch adds support for local process name matching
to the owner match (--cmd-owner option).

You can use this feature to filter connections forwarded by
your ssh daemon with rules like:

ip6tables -N CheckSSHSyns
# allow forwarded connections to rsync port on 192.168.1.1
ip6tables -A CheckSSHSyns -p tcp -d 192.168.1.1 --dport 873 -j RETURN
# refuse everything else
ip6tables -A CheckSSHSyns -j REJECT --reject-with tcp-reset

ip6tables -I OUTPUT -p tcp --syn -m owner --cmd-owner sshd -j CheckSSHSyns

