From nobody Tue Jun 3 04:57:02 2025 X-Original-To: dev-commits-src-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bBJPk0NBNz5y1pR; Tue, 03 Jun 2025 04:58:18 +0000 (UTC) (envelope-from sjg@juniper.net) Received: from mx0b-00273201.pphosted.com (mx0b-00273201.pphosted.com [67.231.152.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "*.pphosted.com", Issuer "Sectigo RSA Organization Validation Secure Server CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bBJPj5r1Xz3C2b; Tue, 03 Jun 2025 04:58:17 +0000 (UTC) (envelope-from sjg@juniper.net) Authentication-Results: mx1.freebsd.org; none Received: from pps.filterd (m0108163.ppops.net [127.0.0.1]) by mx0b-00273201.pphosted.com (8.18.1.2/8.18.1.2) with ESMTP id 5533r4Qj010403; Mon, 2 Jun 2025 21:58:16 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h= cc:content-id:content-transfer-encoding:content-type:date:from :in-reply-to:message-id:mime-version:references:subject:to; s= PPS1017; bh=H4gJmxW/b9LnX5mzA/KAhQ8XiEbiRaYIXqO/5CvVJ/Y=; b=LJHJ Z2zks2ugJcfbFuLA0gFyggdbQwf1+OXgRCtZM/8j9XOkHqzjfjK0W4KgViGKggvS L1TEGVSD7+UD2q+1gH8DjqJbszOZVZzZRWVu724qjN6H2vvkmqSUjElnUqkpdy5y itayhqgAIfurKWUmhDvPE1xDBy4nrwJ40ibxAYBIRmAewqyiPK9/sdIiFEcYysVB 78i2pawgBwyQH8aPPobpnagdaBd4LmP5Hh3+Dyc2hwtgOHB9HTZV8Pu4WNYAciuX /9dlXGGaBdmFu7/CoJkI+nB+jwzKMy8YR77qJ0coik1arPRMMI+yq2J7jmlfSKlt ClCXW/tsq7x3sYlkfw== Received: from cy7pr03cu001.outbound.protection.outlook.com (mail-westcentralusazon11022095.outbound.protection.outlook.com [40.93.200.95]) by mx0b-00273201.pphosted.com (PPS) with ESMTPS id 471g9g9840-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 02 Jun 2025 21:58:16 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=ng/0gIC8j5oKNT2rYWOLp9iimUkpKhUKLWy6Mnp6W9ZvusXASvu9DkIp3EKrEs4P2uXDc8KC9kVLAiTJ1+P55cOL6zoPFbfDiA9SiBiVNpGGnhN4JJmRMJWLB0kYQ3bj/y7DTzOYXJp/YegZdxSLdvHXzCey3WhVftZoyyTNMcV1kd2HwbSpPx1k8KL4x74lYA3XQf0+ihMRBAnTrkQypjLp+CBcXeOFEQDpjpiylsIMRXb41cCQA3kqiQaMXVbF/n+dN5qz8iGpX7/emZ+HObZx1ELfIzrvD4WT7CTysixhv3kFy3LIFgneR9cndVa2uTDdQxkG0gponpwcZdyx6Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=H4gJmxW/b9LnX5mzA/KAhQ8XiEbiRaYIXqO/5CvVJ/Y=; b=fOdA2bTuLXlo9HRVpyOKAHrmELnxa6JLBMLXrH+fctkDcaHCqeYtaGPAQ3lFxq0bFnl4aDcE2lt7pOmfDLhF4n4/bs/VwlB9u7hLJCV+AYfMZlHFd3xCSH8zMuQXb1c7vQP0S8JpMPBSeP7NWA5aQ1zP3Jgw7/cxeBrRHY46WJiCtMwlgBjBSHrZYl83tCV6L4fMTORV/K4EGGlxFvDFGmotOmmCP0OuYnDNlEr8qJsVckgAMX8/0nwX5oUvo5KxTwBd9gAKnV3HZd5iTow971FFbJroH4208yGHLNjEK/qhXm2JUQP7eUKe+Fjyp+TuolQX1fvIdRAoHS8eI5MaLw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=softfail (sender ip is 66.129.239.14) smtp.rcpttodomain=bsdimp.com smtp.mailfrom=juniper.net; dmarc=fail (p=reject sp=reject pct=100) action=oreject header.from=juniper.net; dkim=none (message not signed); arc=none (0) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=H4gJmxW/b9LnX5mzA/KAhQ8XiEbiRaYIXqO/5CvVJ/Y=; b=BLCzChzEmsiAmnb6s5Gjo8UvzPnVETorfN03o/UQXGykeIH0DcmqLJanpSOKdf3JOg2itrkh0yJzE5z7+AyJWbJYrjNg/Fs3ga1VlhAVXOHGDhmJOdRdkOYUdSJrqe+vVc3gcIC0cehlzX9ZqHWxtD3xpSCWmDnWMvIxRXePqRo= Received: from DS7PR03CA0123.namprd03.prod.outlook.com (2603:10b6:5:3b4::8) by DS7PR05MB10115.namprd05.prod.outlook.com (2603:10b6:8:e9::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8792.33; Tue, 3 Jun 2025 04:58:11 +0000 Received: from DS1PEPF0001709B.namprd05.prod.outlook.com (2603:10b6:5:3b4:cafe::4a) by DS7PR03CA0123.outlook.office365.com (2603:10b6:5:3b4::8) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.8769.19 via Frontend Transport; Tue, 3 Jun 2025 04:58:11 +0000 X-MS-Exchange-Authentication-Results: spf=softfail (sender IP is 66.129.239.14) smtp.mailfrom=juniper.net; dkim=none (message not signed) header.d=none;dmarc=fail action=oreject header.from=juniper.net; Received-SPF: SoftFail (protection.outlook.com: domain of transitioning juniper.net discourages use of 66.129.239.14 as permitted sender) Received: from p-exchfe-eqx-01.jnpr.net (66.129.239.14) by DS1PEPF0001709B.mail.protection.outlook.com (10.167.18.105) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8792.29 via Frontend Transport; Tue, 3 Jun 2025 04:58:11 +0000 Received: from p-exchbe-eqx-01.jnpr.net (10.104.9.14) by p-exchfe-eqx-01.jnpr.net (10.104.9.16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1544.14; Mon, 2 Jun 2025 23:58:10 -0500 Received: from p-exchbe-eqx-01.jnpr.net (10.104.9.14) by p-exchbe-eqx-01.jnpr.net (10.104.9.14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1544.14; Mon, 2 Jun 2025 23:58:10 -0500 Received: from kaos.jnpr.net (10.104.20.6) by p-exchbe-eqx-01.jnpr.net (10.104.9.14) with Microsoft SMTP Server id 15.2.1544.14 via Frontend Transport; Mon, 2 Jun 2025 23:58:10 -0500 Received: by kaos.jnpr.net (Postfix, from userid 1377) id D66247DE14; Mon, 02 Jun 2025 21:57:02 -0700 (PDT) Received: from kaos.jnpr.net (localhost [127.0.0.1]) by kaos.jnpr.net (Postfix) with ESMTP id D59CC7DD90; Mon, 02 Jun 2025 21:57:02 -0700 (PDT) To: Warner Losh CC: Kyle Evans , , , , Subject: Re: git: 61d77e6c0095 - main - loader: allow for exceptions to restricted settings. In-Reply-To: References: <202506020549.5525nuDu054998@gitrepo.freebsd.org> <24533e37-2396-40ef-ba84-a5339b811527@FreeBSD.org> Comments: In-reply-to: Warner Losh message dated "Mon, 02 Jun 2025 11:37:34 -0600." From: "Simon J. Gerraty" X-Mailer: MH-E 8.6+git; nmh 1.8; Emacs 30.1 List-Id: Commit messages for the main branch of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-main@freebsd.org Sender: owner-dev-commits-src-main@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <59440.1748926622.1@kaos.jnpr.net> Content-Transfer-Encoding: quoted-printable Date: Mon, 2 Jun 2025 21:57:02 -0700 Message-ID: <60026.1748926622@kaos.jnpr.net> X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DS1PEPF0001709B:EE_|DS7PR05MB10115:EE_ X-MS-Office365-Filtering-Correlation-Id: 8c30a3f7-e96e-44ce-1969-08dda25b3d6e X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|82310400026|36860700013|1800799024|376014|7053199007; X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?D77wSWyVQEz9KweV2VYbJz/Ofc9kErwLKpAbyanLHvp6bZ25yE92b2xB6vJD?= =?us-ascii?Q?4bizSdVt/mDV+3E6LJObDwuDTacxuu2ePYdObzH/YMGnIMGZkQD7pSZxJVvq?= =?us-ascii?Q?YZGFKYe9cg4plvk9m936uB+Z8/DLBUoAfqASa4P+KRQfEJUiQzj+XgsKfgHo?= =?us-ascii?Q?rBCVR+t9gu1Luu0nCexD2Ujb8zGAEbM9DftN1JII+epsUZ0uaGqS/KdacREl?= =?us-ascii?Q?G7qngXTldIvRjZ+dh5KrJ4MnMSbIRaKdfl04jsQK74gg+MfiKSvTzeAmihaC?= =?us-ascii?Q?rvpL/ekZX3T3usTuszuIIhl2zNNmgYA8qTT3gTvtgqsptnFwET2K2/wNdhNA?= =?us-ascii?Q?99aS/uNe8F9s4XdifPADt9KIpN1DbsMGdzcMfXcT8+/eK8zd6zuqv6T+TuS6?= =?us-ascii?Q?7B7b0LrUanZrDTyHxmFsohxkvc292PLaWgE4fX4aRSsLUwR12Xc59hwBUVu2?= =?us-ascii?Q?qEJlQFmpt6rVFS6XvxyJv9EJpebYdzq5DN/fX7sttoAdT8Y3Ki9kfrM0mWpb?= =?us-ascii?Q?xYlJKUtN7LojP2wnzc4Nnuyi19CPcQ7HYWh9o3cwVW6S7Tyntk+oETB5HIVi?= =?us-ascii?Q?r/mLdeDod8qOOcEJP6bGA1sVVbfWontm9ufWQ+/j9aAgrCrjz7bfZu87vmzA?= =?us-ascii?Q?n+s24+p38GmC1D94kzlxOeB+meHkTfXTd9xb9hJwVQQ7fR/uPpSGbiWqBl9p?= =?us-ascii?Q?MfDDEyqfxaPpYzdBPA8oyQQMPSEotIcghrNGfUfyEJxHsKqwBOmKnNq1VIau?= =?us-ascii?Q?BDX4uZPcNM01MxpVGBxdF7V/cIDfRloYnSlenRht6j+sAizdQcYmYvmsS/f0?= =?us-ascii?Q?PXKASueZFho+i68U5N4ADFFtE6cm50D3FVOdyDlFSQKbYOxCwbCWR3Lzx2Qd?= =?us-ascii?Q?C48wFEblCMu5/61hCTwnD0DIXFZ2CQ6yHJ2UEAISHWbz2HLAsDSqk+Kol8GX?= =?us-ascii?Q?vN2NOK2wymeeJ4M+g1VABbOEIg+U7bJQTSZEiPybvWQkT2Emt+eK4lICqmdt?= =?us-ascii?Q?LRW5+lJMM15kPETzflDK/y2sT65No5m/iDVFE0VVziKC/1/N3VJ1scBLEUVb?= =?us-ascii?Q?N2MBwYv1vLNlljo/7kqXpNaUXfCdYrxJNuuOAaHNfBq7i2p9Hdu52IH8548W?= =?us-ascii?Q?wjOu06RvN10izUocGURx+Gel48pXuiYA5/kLhSN21DUk4QFmHG3M+u0826Jt?= =?us-ascii?Q?8zOiT0GFr1hMxouroyLvWG0EEdwRh14H9cIgKCjPrR8xNlc61JBaA2onPPnJ?= =?us-ascii?Q?Ssnrtyy8RSqsAw5RP8VM2S9tbHYBJFFlprr+6zMOyrwgD4hANGEvgSaPhdPF?= =?us-ascii?Q?D9dK+XBK+5zoIQxkRN6YxXIDKkZD6BBGQUwVj5GfHnWmntzDNXiqyHvdJ6eF?= =?us-ascii?Q?B54x7132w8hWOdpxS90p49w5yzQYZJtWrRGKjBRyh6nMvNt0CFcoH47adkCw?= =?us-ascii?Q?vo3JdGO8QcOt8le0fNiOh1Gd21eIXrLN2sCYh+nxuTuyaDy+Y5Cs15M+uck9?= =?us-ascii?Q?nS0VysVNcLbaTgT1mvnrl1e9qUft/A5Im6T5?= X-Forefront-Antispam-Report: CIP:66.129.239.14;CTRY:US;LANG:en;SCL:1;SRV:;IPV:CAL;SFV:NSPM;H:p-exchfe-eqx-01.jnpr.net;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230040)(82310400026)(36860700013)(1800799024)(376014)(7053199007);DIR:OUT;SFP:1102; X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-OriginalArrivalTime: 03 Jun 2025 04:58:11.1926 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 8c30a3f7-e96e-44ce-1969-08dda25b3d6e X-MS-Exchange-CrossTenant-Id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=bea78b3c-4cdb-4130-854a-1d193232e5f4;Ip=[66.129.239.14];Helo=[p-exchfe-eqx-01.jnpr.net] X-MS-Exchange-CrossTenant-AuthSource: DS1PEPF0001709B.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS7PR05MB10115 X-Proofpoint-Spam-Details-Enc: AW1haW4tMjUwNjAzMDAzOSBTYWx0ZWRfX/5kq7QZ7tRUu zRhVkle7tcVLd3bAFtJwPDjFUJ2MGPbFDdY+EBn/nmhNO1uT5V2Fg6qSwhtwV23gefLh4iFw1H2 Z77mLWT2hM6GF9P5Br1pRw1YMdVQpgWKe5IOjeeVrCYvWD2ZJUmOaDYoZXi0+MA6ckjnEnEctw+ PYbiENfmeMtic6RaGa5qnpKD1/dUlunG0QAqtCnkARi7OS5fvy5VLDaR0EpzedmywEeohNPdNtF 4x8fBt7qxtKjCBMArNqfAj/c+9TXQ+ymjGLB4N4KJRZDduaaSO3XlGe7nAsncUxcNFSmDF5/fFy oVCaSABxB3V9dgpiyhVvH32kLbZ1etAFQmFmmgqe16stCWajdAsS1wSPOvF8kchOkDEJOypwe6r VJQ0/O7hhwfahtXlviaAPACMVWN+pK8h7Q0I8IBGEZ0PBkjflmGd3Xshl+gmmsRqdgNp+Hfu X-Authority-Analysis: v=2.4 cv=T4WMT+KQ c=1 sm=1 tr=0 ts=683e80e8 cx=c_pps a=capY3lJrs95JDvUMoegEZA==:117 a=f/rncuQqEjTEF/G1odkJ9w==:17 a=6eWqkTHjU83fiwn7nKZWdM+Sl24=:19 a=h8e1o3o8w34MuCiiGQrqVE4VwXA=:19 a=wKuvFiaSGQ0qltdbU6+NXLB8nM8=:19 a=Ol13hO9ccFRV9qXi2t6ftBPywas=:19 a=kj9zAlcOel0A:10 a=6IFa9wvqVegA:10 a=s63m1ICgrNkA:10 a=rhJc5-LppCAA:10 a=7Qk2ozbKAAAA:8 a=sJrp7ZUEwkj3m_kaO3gA:9 a=CjuIK1q_8ugA:10 a=1lyxoWkJIXJV6VJUPhuM:22 X-Proofpoint-GUID: P9LevOH-6m3RqfF52rqpps-tIoNj7twB X-Proofpoint-ORIG-GUID: P9LevOH-6m3RqfF52rqpps-tIoNj7twB X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1099,Hydra:6.0.736,FMLib:17.12.80.40 definitions=2025-06-03_01,2025-06-02_01,2025-03-28_01 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 bulkscore=0 impostorscore=0 malwarescore=0 adultscore=0 spamscore=0 phishscore=0 lowpriorityscore=0 priorityscore=1501 suspectscore=0 clxscore=1015 mlxlogscore=630 mlxscore=0 classifier=spam authscore=0 authtc=n/a authcc= route=outbound adjust=0 reason=mlx scancount=1 engine=8.19.0-2505280000 definitions=main-2506030039 X-Rspamd-Queue-Id: 4bBJPj5r1Xz3C2b X-Spamd-Bar: ---- X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:22843, ipnet:67.231.152.0/24, country:US] Warner Losh wrote: > > Long-term, we should probably work out something that can work for > > lualoader, too. We use setenv() there directly rather than adding a > > layer of indirection through the command-line parser. > = > Yea, I'd rather this be a property of the env variable than having lists= like > this anyway. And that would solve another problem I have from time to > time As in noting where it can be set? > which is needing to have an always existing env variable with a default,= but > overridable value. In these cases, you have to set that up in code, and = it's a > bit of a bother. If we do it right, we could have a three-fer: works > with lua, works > to set certain things immutable after a time and also lets us initialize= things. > Though getting the details right so that we can set these in > loader.conf, but then > not set them on the command line is the most likely use case, and I > thought for that > use case we did the right thing in lualoader. no? > = > Warner