From nobody Mon Jun 2 16:14:54 2025 X-Original-To: dev-commits-src-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4b9zSx0DCBz5x2Nt; Mon, 02 Jun 2025 16:14:57 +0000 (UTC) (envelope-from kevans@FreeBSD.org) Received: from smtp.freebsd.org (smtp.freebsd.org [IPv6:2610:1c1:1:606c::24b:4]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4b9zSw5bKhz3FMq; Mon, 02 Jun 2025 16:14:56 +0000 (UTC) (envelope-from kevans@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1748880896; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=DlInqm/ihSsGhvgUU+Dq8MWo23yMXjWvoRZoX+d94TM=; b=WXH63E95Yb1CEuBXBLr5SOmYj1wQCeZMERmw4XpA2tTmoP9I7aE603PE0RUqDN7qtvx77/ YFCK/DNmZr+LoGDbp2NalCfXY/k3S0kgqUMc7hXWDTSnl3ofkVlcgRA5QXAeaY6CXle7EK nBr38662ySoEcmwxVvGE08nmzXTHh+Ev3WvWms2a+g9VRiJF9Bu4x+XJBvS855j9j/aTIo FQxIoimhb1tmgAauTVBY3FqwZk7kTEfOT2mVuxhOVcU/rECMGLBloihL3QRczuK3OMLkoC wvlUSThWvFzA/8+mSm9LlMWpCAHF7TJ2LCQVE5SS1z64lksDxB/jNQj/81YgQg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1748880896; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=DlInqm/ihSsGhvgUU+Dq8MWo23yMXjWvoRZoX+d94TM=; b=GBml4xaAfsXmbkva+nflOZfURVux++lpUVRN+70fbBk/3Ur1MkJwwBGfx1+41WcQUuiXBu p5i+3a2BgZF8DcjbVs+V2/mGFd68Iq5zRUWhthvowwWlS38Bv7ydQPuHQ2NR1h0mhEY1AA /A464Vadp6QU3EssJ4MvrL28eRzkU2jUi3nrkGZrily4hUeJSYymhXkjEYmTbbBJxVrri4 UUwh0yFedAexc1BNGFFRwi75H+btXOFIXv8D2tHYyviL9mkz3na/6gVyKJ16rvIbguNdDh 46PgJBQerlfz1ja/Jnx/E88oObvKYmo2EPLK44vAWqDZ/Hr/pjmHTxao17WwgA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1748880896; a=rsa-sha256; cv=none; b=ZIJYA5zuvWopyC4x8azBgSPqQfZX4JtnWeTWcJ+sPyUbRzkr4yyStSARu3kTLwwhrextc4 8S2pYauqcqEqx+SgA2VGzd7RsZ/zWNH/0Bw91ZQWHtknnmzq866Ka8/qg/z1Mt296jp8QQ M/WbCllcdQ33Uj7tOXHvoUqUvpIG1GkXlqhh52lVv0lOsl7KYlMIV7ONCXnxN8ed0UZm64 NEw9N13yGsGbq9hIFmyNk6gmlG0Poc6cVJSO6X3myfOdhSlFtkkcf8BupcM0Kie/mWd+O8 KIEXgMwd6LtubQwrIZZlmdME00xuSyWx5JZxV+AcVVD2bLpoG/oJYTE8J1Eb4A== Received: from [10.9.4.95] (unknown [209.182.120.176]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) (Authenticated sender: kevans/mail) by smtp.freebsd.org (Postfix) with ESMTPSA id 4b9zSw2S7szHd3; Mon, 02 Jun 2025 16:14:56 +0000 (UTC) (envelope-from kevans@FreeBSD.org) Message-ID: <24533e37-2396-40ef-ba84-a5339b811527@FreeBSD.org> Date: Mon, 2 Jun 2025 11:14:54 -0500 List-Id: Commit messages for the main branch of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-main@freebsd.org Sender: owner-dev-commits-src-main@FreeBSD.org MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: git: 61d77e6c0095 - main - loader: allow for exceptions to restricted settings. To: "Simon J. Gerraty" , src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org References: <202506020549.5525nuDu054998@gitrepo.freebsd.org> Content-Language: en-US From: Kyle Evans In-Reply-To: <202506020549.5525nuDu054998@gitrepo.freebsd.org> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit On 6/2/25 00:49, Simon J. Gerraty wrote: > The branch main has been updated by sjg: > > URL: https://cgit.FreeBSD.org/src/commit/?id=61d77e6c009544d1489078c16a5d22b27d25c91b > > commit 61d77e6c009544d1489078c16a5d22b27d25c91b > Author: Simon J. Gerraty > AuthorDate: 2025-06-02 05:48:43 +0000 > Commit: Simon J. Gerraty > CommitDate: 2025-06-02 05:48:43 +0000 > > loader: allow for exceptions to restricted settings. > > We restrict what an unverified loader.conf etc can set, > and the same restrictions are applied to interactive input. > We need to allow for exceptions (eg boot_verbose). > It is best if any allowed settings match up to '='. > > If we do not allow it to be set, do not allow it to be unset > > Reviewed by: stevek > Sponsored by: Juniper Networks, Inc. > --- Long-term, we should probably work out something that can work for lualoader, too. We use setenv() there directly rather than adding a layer of indirection through the command-line parser. Thanks, Kyle Evans