[Bug 286263] security/openvpn: requires legacy IP support for ovpn(4) DCO module to be operational

From: <bugzilla-noreply_at_freebsd.org>
Date: Sat, 21 Feb 2026 12:43:14 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=286263

--- Comment #7 from Kristof Provost <kp@freebsd.org> ---
Hmm, yeah, I think we can get away with just using AF_LOCAL. There's
functionally no difference between AF_INET, AF_INET6 or AF_LOCAL for the calls
we care about.
They all pass through soo_ioctl(), which will call ifioctl() for any
IOCGROUP(cmd) == 'i' (which is the ones we care about here), so that should
just work, no matter what address families the kernel supports.

Obviously openvpn over IPv4 won't work on a nooptions INET system, but that's
kind of the point.

-- 
You are receiving this mail because:
You are the assignee for the bug.