From nobody Thu Apr 30 20:38:50 2026 X-Original-To: dev-commits-src-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4g65cB1gLMz6cDTD for ; Thu, 30 Apr 2026 20:38:50 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R13" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4g65cB0qqQz3Rbx for ; Thu, 30 Apr 2026 20:38:50 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1777581530; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=bcNh4M/vIbnWVGlPqKabI2YL1lvkP8rg0kygloJV0cs=; b=xTWzFdZvxgZy9z1eaiNjU7WF+vFR3qHajY1Btllv1RnZM2pbOW1UPx2kGw0XifY0kUaVq6 Dc0i1qylBk/le0plJdSy9KfgIDDh6jHrjDk6Hu6iV1CSgX83c41/SodHXVcxA7ZRHlQDJ9 r1izo8XfmvXmYISZYBMxsR9FVdDeh6Ad5DjXs5b1XaxDi1hT/SNIf5B1n5YetsKRgxbfBQ z29vx6mNeLWxoMLLH8EuGmo4Tx3CC48i98+85tHegQm8YWtyKH4kv4UHl7WuKQBk0FyRUg RvYYbPFI+LNoHGop3Bj4rFALXSvKWk7Ev1myK9zZX4FYPjNHxqCPAc/wF2fqew== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1777581530; a=rsa-sha256; cv=none; b=sOVb/0MJKlty5o1dPy9EPe6zEwb/TXjs+4rxoyovU3YVr0eRVSJ4NeHeyFNNTv+TDCvexL amXOU793wbd1rr5QxHeve3n1hZFNlcbYaRB6/OD/AJzvjIWGQ4VIX9+bWNuQ31xJV0mUjo OzX7gGpRATMSO6/8CX/UqiZQCL3eQjCeDoP4Lz6rxhspyr1cR73ZukDRXVnpp5F1NxsVCz qY6L9jm+wsvNq0KBrfQqWE1dag2Hm+gTtBq2hr0cMO6LWiwA72qZzXwvxQSWVdo3YFdPDA yio2FIYB+V8N3Cx1qJCoKk2ewWGOEklGGqN6nTZuyAOtRgB+5w+39sipMO5e2Q== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1777581530; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=bcNh4M/vIbnWVGlPqKabI2YL1lvkP8rg0kygloJV0cs=; b=Vk6SqledC+/bvZwHjVEpXm6rVFXa9yJfWczdCqgwAf96YarT9jRw446qt66e2GoA7jBnrC 92IpVgSLbNpMGYVLgVDgvKdRExkfV//NB8QBgc0k5/EHFkkUQxBCGrUDiH2g6NHlgDWXnH +l/aNJiZ54ybV4mYh/7h9HkU1zANKvS1TbKycHJvtu1qkrBnSUN113V/MdZQ6zV6bINf9C ZLH2fcl8Rg4z6XnyXmPzJ67ELmaN95+z20S7x4Uf5Zr35W4FtRng3HCspcKA9lchohMN9/ /ezCATNZRjML8RhX/b15jBwPj4Hgr4Mv7czwZUpemx/qP6T2AW1pTXt+N2Wuzw== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4g65cB0GlLzC4D for ; Thu, 30 Apr 2026 20:38:50 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id 42ea3 by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Thu, 30 Apr 2026 20:38:50 +0000 To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org From: Michael Tuexen Subject: git: cf678e30ca01 - main - devfs: add bpf example List-Id: Commit messages for all branches of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-all@freebsd.org Sender: owner-dev-commits-src-all@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: tuexen X-Git-Repository: src X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: cf678e30ca015c93edc8a43aeff58cce3249c3af Auto-Submitted: auto-generated Date: Thu, 30 Apr 2026 20:38:50 +0000 Message-Id: <69f3bdda.42ea3.7e279350@gitrepo.freebsd.org> The branch main has been updated by tuexen: URL: https://cgit.FreeBSD.org/src/commit/?id=cf678e30ca015c93edc8a43aeff58cce3249c3af commit cf678e30ca015c93edc8a43aeff58cce3249c3af Author: Michael Tuexen AuthorDate: 2026-04-30 20:35:07 +0000 Commit: Michael Tuexen CommitDate: 2026-04-30 20:35:07 +0000 devfs: add bpf example Add an example for allowing members of the network group to read from bpf devices. In particular, this allows members of the network group to monitor traffic without running with root privileges. Reviewed by: markj, glebius Sponsored by: Netflix, Inc. Differential Revision: https://reviews.freebsd.org/D56742 --- sbin/devfs/devfs.conf | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/sbin/devfs/devfs.conf b/sbin/devfs/devfs.conf index d3430a2fe844..3e010259a280 100644 --- a/sbin/devfs/devfs.conf +++ b/sbin/devfs/devfs.conf @@ -40,3 +40,9 @@ # Allow members of group operator to cat things to the speaker #own speaker root:operator #perm speaker 0660 + +# Allow members of group network to read from bpf devices. +# In particular, this allows all group members to capture all +# network traffic using tcpdump or wireshark. +#own bpf root:network +#perm bpf 0640