Subject: Re: [PATCH] netfilter: Record uid and gid in xt_AUDIT

From: Florian Westphal <[email-masked]>
Date: Thu, 10 Oct 2024 15:48:27 +0200

Richard Weinberger <[email-masked]> wrote:
> Am Mittwoch, 9. Oktober 2024, 23:33:45 CEST schrieb Florian Westphal:
> > There is no need to follow ->file backpointer anymore, see
> > 6acc5c2910689fc6ee181bf63085c5efff6a42bd and
> > 86741ec25462e4c8cdce6df2f41ead05568c7d5e,
> > "net: core: Add a UID field to struct sock.".
> 
> Oh, neat!
>  
> > I think we could streamline all the existing paths that fetch uid
> > from sock->file to not do that and use sock_net_uid() instead as well.
>  
> Also xt_owner?

sk->sk_uid is already used e.g. for fib lookups so I think it makes
sense to be consistent, so, yes, xt_owner, nfqueue, nft_meta.c, all can
be converted.