Indeed there is an auditing bug with network rules which prevents them from being quieted (the denial does actually happen). This has been fixed upstream, but needs to be backported for Ubuntu kernels.
Indeed there is an auditing bug with network rules which prevents them from being quieted (the denial does actually happen). This has been fixed upstream, but needs to be backported for Ubuntu kernels.