Received: by 2002:a05:6a10:9848:0:0:0:0 with SMTP id x8csp22828pxf; Tue, 30 Mar 2021 17:59:12 -0700 (PDT) X-Google-Smtp-Source: ABdhPJyVlA2hjyIfURmuJAcCKR4pUtz0VxpzVtiboBmN8nEuHS9IWNq/iW80uN4IdRY5YbwvY7x8 X-Received: by 2002:aa7:d385:: with SMTP id x5mr600811edq.289.1617152351897; Tue, 30 Mar 2021 17:59:11 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1617152351; cv=none; d=google.com; s=arc-20160816; b=wQDcDfg3t/IOcydnO9LyaOhZ29b/Ur2HSNcG+JCO+Cw4nIbxT9V0f7gGlLXIKZYLog lDZn2hfO0PcxfxIlkpJK1rhVqs74ZNugptWCWoi1zrdRUawneLm81pFxKPU53/zPsElm 45RfFIzDx98fHmHlO4uwm09EEglGn2X0YjbxcOls+jxlx2unhwJHzCdwlYcA2S8oDxs6 TAnaOgiMkLdyvxMPtN4476cDnES7qnAtPza+vezta9cwEtmyvj/7vFiAcbhbw1GykC3A /mgUqIon+d+I/renrqBjDOqHkIYYE2k3tu8TliwwCbbKWV3w7wMS5sgl1prsUCJViBCK eqHA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:dkim-signature; bh=kl/VN0YgAEhgx4FFK1e1sErce6wVUQp5L+zl5YHWmRs=; b=bBEf5lA8zVWPyf2XMQZlm3dm1Tp6yPLDxyjAEobgo2okadV4aqgT1t5XLXUg26gX09 EmCPJp+GMNxLcCsHiKzwNaaXa7Ib2YEfts9tXTv23S5Q6ZllBw86XBqHmJoCdcWX35R6 dvQxh5P+xFRx7W5xsetHfdUxPZr4hjFyDAxfAPOavDgOAWfAxQ7B2rkSJkLbadT6J83E M44BHB8xmDzxsJg3oucM+rn6gpvAbHoSzK13Yi+dwWCZFey9ooApZ0xG8uLxeIfq+Lbu KSnqZhwntm4L47ZqmcpbhAwixP7RY/stTSflgrQn2ptZS/FV204TrIIRp5SMtY9bwmbJ W4CA== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@paul-moore-com.20150623.gappssmtp.com header.s=20150623 header.b=Aq93nxWW; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id p6si353720ejw.222.2021.03.30.17.58.49; Tue, 30 Mar 2021 17:59:11 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@paul-moore-com.20150623.gappssmtp.com header.s=20150623 header.b=Aq93nxWW; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S233136AbhCaAvK (ORCPT + 99 others); Tue, 30 Mar 2021 20:51:10 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:38586 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S232979AbhCaAug (ORCPT ); Tue, 30 Mar 2021 20:50:36 -0400 Received: from mail-ed1-x531.google.com (mail-ed1-x531.google.com [IPv6:2a00:1450:4864:20::531]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 29E6CC061762 for ; Tue, 30 Mar 2021 17:50:36 -0700 (PDT) Received: by mail-ed1-x531.google.com with SMTP id l18so20269173edc.9 for ; Tue, 30 Mar 2021 17:50:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=paul-moore-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=kl/VN0YgAEhgx4FFK1e1sErce6wVUQp5L+zl5YHWmRs=; b=Aq93nxWWXoI+PtP+UXmi6cq6B1Mo5+tsVZddLjswYsmqBnWzY+A4iFt8gN90eQ1SpI TYNbAkLLP+X1IyOqeAez1zOziqS1ArscOCfdC4rcvY66zNGZxQAMUNRAkyd1+BW4VqE5 /+PogSR1ChJBCLIeZzWmQg4SVVisgq3feaAL8bK8IpodM6r40Sr4zfN/7lRRPWi47Epu lIviq7hpappEMj06QQPPrHwcndho7SGcutrprEV3o04tvYCg8+pc/HAKFAR6iqYz11Uf YbGs2hLmxhwnLXh+isZb1SJDwQCv0Ng2ChAnTPVdNLmSbLvU2ABaPgxmtNeFX+vNQqAU etSQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=kl/VN0YgAEhgx4FFK1e1sErce6wVUQp5L+zl5YHWmRs=; b=Z5bqs4tucvIikFq9PDRkyBx490w2bsKiMBYpmotKb0HF8Wh66B/pgz4OaxiRa1f/Ma pkwsnuyocTTsLZryim7G30BrZMlorvPOSrDS2eYb1TYN0ti/bZf//xXWahcufV51XEDV liXM/YUyuZKewoPzT2nnn4rLuoMBnHOFkovdvqMXC98U/WjsOuDXtsdFVYnzTBVL9ZxL KBTM5xuxTibdtvtUka8fAmeesIpRRsDR35oO6VZEdUof9lW3KZf5ujSroc1F45fbiXkO Z1q/QZqoZ0r4SI0oBZVKRy851YV+pHHRV5VHQYUgoirOqGAu37Xtv8dBozFghdzQ6YEM FxOg== X-Gm-Message-State: AOAM532NnjB8zPB7zJS98fblXqf92nPVWDQgBtreRSOXlXUnbBnIrgSd 8sYj9mLXioZFY796l6MSgZ8pg56qtT/q4a84g2fQ X-Received: by 2002:aa7:db4f:: with SMTP id n15mr646594edt.12.1617151834810; Tue, 30 Mar 2021 17:50:34 -0700 (PDT) MIME-Version: 1.0 References: <28de34275f58b45fd4626a92ccae96b6d2b4e287.1616702731.git.rgb@redhat.com> <20210330225339.GA14421@salvia> In-Reply-To: <20210330225339.GA14421@salvia> From: Paul Moore Date: Tue, 30 Mar 2021 20:50:23 -0400 Message-ID: Subject: Re: [PATCH v5] audit: log nftables configuration change events once per table To: Pablo Neira Ayuso Cc: Richard Guy Briggs , Linux-Audit Mailing List , LKML , netfilter-devel@vger.kernel.org, Eric Paris , Steve Grubb , Florian Westphal , Phil Sutter , twoerner@redhat.com, tgraf@infradead.org, dan.carpenter@oracle.com, Jones Desougi Content-Type: text/plain; charset="UTF-8" Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Tue, Mar 30, 2021 at 6:53 PM Pablo Neira Ayuso wrote: > On Sun, Mar 28, 2021 at 08:50:45PM -0400, Paul Moore wrote: > [...] > > Netfilter folks, were you planning to pull this via your tree/netdev > > or would you like me to merge this via the audit tree? If the latter, > > I would appreciate it if I could get an ACK from one of you; if the > > former, my ACK is below. > > > > Acked-by: Paul Moore > > I'll merge this one into nf-next, this might simplify possible > conflict resolution later on. Yep, I think that's the best choice. Thanks. -- paul moore www.paul-moore.com