Phil Sutter <phil@xxxxxx> wrote: > Every syslog logging callback has to perform the same check to cover for > rogue containers, introduce a helper for clarity. Drop the FIXME as > there is a viable solution since commit 2851940ffee31 ("netfilter: allow > logging from non-init namespaces"). Thanks, this looks good to me.