:INPUT,FORWARD,OUTPUT
*security
-j SECMARK --selctx system_u:object_r:firewalld_exec_t:s0;=;OK
-j SECMARK;;FAIL