iptables match based on source security context?

[Christoph A.]

Hi,

I'd like to redirect traffic (for transparent proxying) coming from a
program running in a sandbox_net_t (or sandbox_web_t) sandbox, but as
far as I've seen there is no possibility to match/mark packets based on
there local security context origin.

Is that idea somehow possible?

thanks,
Christoph A.