Hi, On Thu, 2017-08-24 at 17:49 +0200, Pablo Neira Ayuso wrote: > Attaching a revamped version, it is collapsing your patch 5 and 6. > > We still have to agree on what to do with the netlink socket. I know > you don't want to open it from the client side. > > The only way I find to do this is to - yick - add a flag to > nft_ctx_new(). Agree with the flag idea. This will add a minimum flexibility to the structure creation. Regarding the patch, I'm good with it. Acked-by: Eric Leblond <eric@xxxxxxxxx> ++ -- Eric Leblond <eric@xxxxxxxxx> -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html