On Mon, Feb 01, 2021 at 03:00:42PM +0000, Al Viro wrote: > The last one is the easiest to answer - we want to keep the imported strings > around for audit. It's not so much a proper refcounting as it is "we might > want freeing delayed" implemented as refcount. BTW, regarding io_uring + audit interactions - just how is that supposed to work if you offload any work that might lead to audit records (on permission checks, etc.) to helper threads?