git: 35d427d6d0a5 - stable/13 - ipfilter: Add missing kenv fetch

The branch stable/13 has been updated by cy:

URL: https://cgit.FreeBSD.org/src/commit/?id=35d427d6d0a58644daf8e81f1b23553403c6c0bf

commit 35d427d6d0a58644daf8e81f1b23553403c6c0bf
Author:     Cy Schubert <cy@FreeBSD.org>
AuthorDate: 2025-12-15 16:21:56 +0000
Commit:     Cy Schubert <cy@FreeBSD.org>
CommitDate: 2026-01-05 03:40:11 +0000

    ipfilter: Add missing kenv fetch
    
    When a module the environment must be explicitly fetched.
    
    Fixes:                  d9788eabffa4
    PR:                     291548
    Noted by:               markj
    Reviewed by:            markj
    Differential Revision:  https://reviews.freebsd.org/D54242
    MFC after:              3 days
    (cherry picked from commit a6ea80bc917510b5e056cc5a29b62dfd7b39d068)
---
 sys/netpfil/ipfilter/netinet/ip_fil_freebsd.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/sys/netpfil/ipfilter/netinet/ip_fil_freebsd.c b/sys/netpfil/ipfilter/netinet/ip_fil_freebsd.c
index a5f634247a1a..f2cbaa0bd0b0 100644
--- a/sys/netpfil/ipfilter/netinet/ip_fil_freebsd.c
+++ b/sys/netpfil/ipfilter/netinet/ip_fil_freebsd.c
@@ -1474,4 +1474,6 @@ ipf_fbsd_kenv_get(ipf_main_softc_t *softc)
 {
 	TUNABLE_INT_FETCH("net.inet.ipf.large_nat",
 		&softc->ipf_large_nat);
+	TUNABLE_INT_FETCH("net.inet.ipf.jail_allowed",
+		&softc->ipf_jail_allowed);
 }