On Monday 19 January 2015 14:06:34 Pablo Neira Ayuso wrote: > On Mon, Jan 19, 2015 at 02:00:24PM +0100, Pablo Neira Ayuso wrote: > > I think the best solution is to use to flock() as others do but then > we need a writable filesystem() which is what Phil was trying to skip. This appears to work: flock /sys/module/ip_tables best regards Patrick -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html