On Fri, Jul 3, 2020 at 8:41 AM Jones Desougi <jones.desougi+netfilter@xxxxxxxxx> wrote: > > Doesn't seem entirely consistent now either though. Two cases below. Yes, you're right, that patch was incorrect; thanks for catching that. I just posted a fix (lore link below) that fixes the two problems you pointed out as well as converts a call in a RCU protected section to an ATOMIC. https://lore.kernel.org/linux-audit/159378341669.5956.13490174029711421419.stgit@sifl -- paul moore www.paul-moore.com