Re: [nft PATCH] mnl: support RLIMIT_NOFILE soft limit > FD_SETSIZE

Pablo Neira Ayuso <[email protected]> Fri, 10 Jul 2026 13:40:27 +0200

Newsgroups	gmane.comp.security.firewalls.netfilter.devel
Message-ID	<alDaK3OXX0hM5uUb@chamomile>

On Thu, Jul 09, 2026 at 12:53:13PM -0400, Cory Snider wrote:
> Use poll(2) instead of select(2) to poll the netlink socket so processes
> which raise their file descriptor soft limit beyond FD_SETSIZE can use
> libnftables without risk of the process aborting when too many files are
> open.

Applied, thanks.