Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 21 Feb 2026 12:43:14 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 286263] security/openvpn: requires legacy IP support for ovpn(4) DCO module to be operational
Message-ID:  <bug-286263-227-6vAki3CZ9d@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-286263-227@https.bugs.freebsd.org/bugzilla/>

index | next in thread | previous in thread | raw e-mail

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=286263

--- Comment #7 from Kristof Provost <kp@freebsd.org> ---
Hmm, yeah, I think we can get away with just using AF_LOCAL. There's
functionally no difference between AF_INET, AF_INET6 or AF_LOCAL for the calls
we care about.
They all pass through soo_ioctl(), which will call ifioctl() for any
IOCGROUP(cmd) == 'i' (which is the ones we care about here), so that should
just work, no matter what address families the kernel supports.

Obviously openvpn over IPv4 won't work on a nooptions INET system, but that's
kind of the point.

-- 
You are receiving this mail because:
You are the assignee for the bug.

home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-286263-227-6vAki3CZ9d>