[Bug 286263] security/openvpn: requires legacy IP support for ovpn(4) DCO module to be operational
- In reply to: bugzilla-noreply_a_freebsd.org: "[Bug 286263] ovpn(4) DCO module requires legacy IP support"
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Sat, 21 Feb 2026 12:43:14 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=286263 --- Comment #7 from Kristof Provost <kp@freebsd.org> --- Hmm, yeah, I think we can get away with just using AF_LOCAL. There's functionally no difference between AF_INET, AF_INET6 or AF_LOCAL for the calls we care about. They all pass through soo_ioctl(), which will call ifioctl() for any IOCGROUP(cmd) == 'i' (which is the ones we care about here), so that should just work, no matter what address families the kernel supports. Obviously openvpn over IPv4 won't work on a nooptions INET system, but that's kind of the point. -- You are receiving this mail because: You are the assignee for the bug.