[Bug 295324] /etc/periodic/security/520.pfdenied broken

From: <bugzilla-noreply_at_freebsd.org>
Date: Sat, 16 May 2026 09:14:09 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295324

            Bug ID: 295324
           Summary: /etc/periodic/security/520.pfdenied broken
           Product: Base System
           Version: 15.0-RELEASE
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: misc
          Assignee: bugs@FreeBSD.org
          Reporter: p+freebsd@krvtz.net

Created attachment 270776
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=270776&action=edit
Diff to fix the bug

Current version of /etc/periodic/security/520.pfdenied broken fails in the loop
iterating through the list of anchors - empty, blacklistd, blocklistd - because
the anchor name is passed as an argument pfctl -a. For the first item, empty
string, this results in syntax error. Sample output from "sh -x 520.pfdenied":


+ pfctl -a blacklistd -sA
+ pfctl -a blocklistd -sA
+ pfctl -a '' -sr -v -z     <-- this is invalid command

Proposed fix can be found in the diff and it simply changes pfctl command line
syntax for an empty anchor.

-- 
You are receiving this mail because:
You are the assignee for the bug.