Re: [PATCH] audit: log nftables configuration change events once per table

On 2021-03-18 17:30, Phil Sutter wrote:

> Why did you leave the object-related logs in place? They should reappear > at commit time just like chains and sets for instance, no? There are other paths that can trigger these messages that don't go through nf_tables_commit() that affect the configuration data. The counters are considered config data for auditing purposes and the act of resetting them is audittable. And the only time we want to emit a record is when they are being reset.