Can PF allow access by username/userid?

[Jeremy C. Reed]

> http://www.linux.com/article.pl?sid=04/07/01/1833212
> 
> ... under the section "Putting it in action", the writer
> describes how they limit access by username with IPTables.
> 
> I am wondering if this is achievable with PF. If yes, which section
> of the FAQ should I read?

The PF FAQ does not cover that.

But it should. Anyone interested in writing a paragraph with example of 
using "user" and "group" for the PF FAQ?  (Also "group" is not supported 
on some PF platforms because the gid of user with the socket is not kept.)

You can also setup access rules by authenticated login first -- see the PF 
FAQ "authpf.html" chapter.