Re: [nf PATCH 1/2] netfilter: nf_tables: Audit log setelem reset
Pablo Neira Ayuso <[email protected]> Wed, 30 Aug 2023 17:46:53 +0200
| Newsgroups | com.redhat.linux-audit,org.kernel.vger.netfilter-devel |
|---|---|
| Message-ID | <ZO9kberk3iNZv2qj@calendula> |
On Tue, Aug 29, 2023 at 07:51:57PM +0200, Phil Sutter wrote: > Since set element reset is not integrated into nf_tables' transaction > logic, an explicit log call is needed, similar to NFT_MSG_GETOBJ_RESET > handling. > > For the sake of simplicity, catchall element reset will always generate > a dedicated log entry. This relieves nf_tables_dump_set() from having to > adjust the logged element count depending on whether a catchall element > was found or not. Applied, thanks Phil -- Linux-audit mailing list [email protected] https://listman.redhat.com/mailman/listinfo/linux-audit