---
title: "1.24.22 — Ignore non-exec firewall Audit records"
description: "MojoSec now excludes explicit non-exec NETFILTER syscall compounds that reuse a firewall child PID from the process-generation proof graph, while managed and unknown exec evidence stays conservative."
date: "2026-09-09"
tags: ["release"]
canonical: "https://django-mojo.sitesmojo.com/changelog/1-24-22/"
---

MojoSec now excludes explicit non-exec NETFILTER syscall compounds that reuse a firewall child PID from the process-generation proof graph, while managed and unknown exec evidence stays conservative.

### Fixed

- Prevented same-PID NETFILTER Audit activity from vetoing an otherwise proven firewall execution.