On Fri, Apr 26, 2019 at 09:14:43PM +0200, Johannes Berg wrote: > Yeah, ok. Each object you had is basically its own policy. I just > *removed* having a separate policy for each command in generic netlink, > as ;-) But that only affects genetlink users who let genetlink validate and parse messages for them. Those validating/parsing the messages themselves can still have different policy (and completely different set of attributes) for each command. Michal