On Wed, Sep 06, 2023 at 11:39:41PM +0200, Phil Sutter wrote: > On Wed, Sep 06, 2023 at 03:56:41PM -0400, Paul Moore wrote: [...] > > If it is a bug, please submit a fix for this as soon as possible Pablo. > > Thanks for your support, but I can take over, too. The number of > notifications emitted even for a small ruleset is not ideal, also. It's > just a bit sad that I ACKed the patch already and so it went out the > door. Florian, can we still put a veto there? Phil, kernel was crashing after your patch, this was resulting in a kernel panic when running tests here. I had to revert your patches locally to keep running tests. Please, just send an incremental fix to adjust the idx, revert will leave things in worse state. Audit does not show chains either, which is not very useful to locate what where exactly the rules have been reset, but that can probably discussed in net-next. Richard provided a way to extend this if audit maintainer find it useful too. Thanks.
