Patch 1 fixes/improves Pablo's fix for the bug I built into nf_tables' audit support code. I propose it for nf, but nf-next is OK from my PoV if it is deemed too risky. Patch 2 adds a selftest for the audit notifications in nf_tables. Since audit logging can not be turned off, it may cause problems requiring a reboot to resolve. So I'd like to hear your opinions first before attempting an "official" proposal. Phil Sutter (2): netfilter: nf_tables: Fix entries val in rule reset audit log selftests: netfilter: Test nf_tables audit logging net/netfilter/nf_tables_api.c | 21 ++++-- .../testing/selftests/netfilter/nft_audit.sh | 75 +++++++++++++++++++ 2 files changed, 88 insertions(+), 8 deletions(-) create mode 100755 tools/testing/selftests/netfilter/nft_audit.sh -- 2.41.0
