On Sun, Nov 04, 2018 at 12:07:14PM +0100, Florian Westphal wrote: > Its possible to set both HANDLE and POSITION when replacing a rule. > In this case, the rule at POSITION gets replaced using the > userspace-provided handle. Rule handles are supposed to be generated > by the kernel only. > > Duplicate handles should be harmless, however better disable this "feature" > by only checking for the POSITION attribute on insert operations. Applied, thanks Florian.