13:38 <dustymabe> quentin9696[m]: https://bugzilla.redhat.com/show_bug.cgi?id=2188714#c9

13:38 <dustymabe> in permissive mode there won't be a failure but the logs will show all of the denials

13:42 <quentin9696[m]> dustymabe: yes, I'll do it during the day. But I think the issue is more that just my case: we should allow all the common use case, like setup rules with iptables and other actions like that

13:43 <dustymabe> i agree - but maybe answering the question still helps us get to that end goal

13:43 <dustymabe> maybe post the logs and also state that (but we could run any script to do anything in the hook)

13:46 <quentin9696[m]> dustymabe: yes. The idea is not to cover 100% of usages, but most of them. If you really need a custom script and you know what you did, maybe a boolean to unconfined wg can be a solution. I'll post that during the day

13:50 <dustymabe> +1

21:00 <dustymabe> release notes PR (needs two reviews): https://github.com/coreos/fedora-coreos-streams/pull/741