inode recognition in ipt_owner module

[ori bar <tohava@gmail.com>]

ipt_owner as it currently is very problematic in matching packets from
a specific app.
(for those of us who want to use it "a-la personal firewall").

the current cmd matching is noit smart because it's only based on the
first 16 letters of a filename, and that can easily be spoofed.

I was wondering, it may be possible to an inode based matching, from
what i've read in the /proc/xxx/exe mechanism source code, all it
takes, is using the pid to get access to a list of file mappings, from
them, take the first executable mapping, from it, get the dentry, from
dentry get inode, and from inode get i_ino which should be the inode
number. This may allow us to better define "app-based rules".

Is there already something like this somewhere in netfilter?
Does anybody want me to try implementing it and send it somewhere
(notice: i never developed kernel modules, i only read them so far, so
i may need some help here)?

Thanks in advance and have a nice day 

-- 
1110101111111110 - it's a way of life