On Thu, Sep 28, 2023 at 04:48:11PM +0200, Phil Sutter wrote: > On Wed, Sep 27, 2023 at 09:41:53PM +0200, Pablo Neira Ayuso wrote: > > OK, so nft_obj_notify() is called from nft_quota to notify that the > > quota is depleted and the audit log is still there in this case. > > Exactly. I needed an internal __nft_obj_notify() which just serves > notify_list but not audit. Patch LGTM, thanks for explaining!