git: a23b64b46cb1 - stable/14 - ipfilter: Add missing kenv fetch

From: Cy Schubert <cy_at_FreeBSD.org>
Date: Mon, 05 Jan 2026 20:01:29 UTC
The branch stable/14 has been updated by cy:

URL: https://cgit.FreeBSD.org/src/commit/?id=a23b64b46cb1e9885073ef6086769584b69f56bf

commit a23b64b46cb1e9885073ef6086769584b69f56bf
Author:     Cy Schubert <cy@FreeBSD.org>
AuthorDate: 2025-12-15 16:21:56 +0000
Commit:     Cy Schubert <cy@FreeBSD.org>
CommitDate: 2026-01-05 20:01:01 +0000

    ipfilter: Add missing kenv fetch
    
    When a module the environment must be explicitly fetched.
    
    Fixes:                  d9788eabffa4
    PR:                     291548
    Noted by:               markj
    Reviewed by:            markj
    Differential Revision:  https://reviews.freebsd.org/D54242
    MFC after:              3 days
    (cherry picked from commit a6ea80bc917510b5e056cc5a29b62dfd7b39d068)
---
 sys/netpfil/ipfilter/netinet/ip_fil_freebsd.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/sys/netpfil/ipfilter/netinet/ip_fil_freebsd.c b/sys/netpfil/ipfilter/netinet/ip_fil_freebsd.c
index ed20a826ad52..f67da50a990f 100644
--- a/sys/netpfil/ipfilter/netinet/ip_fil_freebsd.c
+++ b/sys/netpfil/ipfilter/netinet/ip_fil_freebsd.c
@@ -1472,4 +1472,6 @@ ipf_fbsd_kenv_get(ipf_main_softc_t *softc)
 {
 	TUNABLE_INT_FETCH("net.inet.ipf.large_nat",
 		&softc->ipf_large_nat);
+	TUNABLE_INT_FETCH("net.inet.ipf.jail_allowed",
+		&softc->ipf_jail_allowed);
 }