FreeBSD 15 permission for pfctl

Go to: [ bottom of page ] [ top of archives ] [ this month ]

From: Matthias Fechner <idefix_at_fechner.net>
Date: Sat, 06 Dec 2025 16:52:45 UTC

Dear all,

it seems that with FreeBSD 15 there is additional permission required to 
execute pfctl.

With FreeBSD 14 I had in /etc/devfs.conf:
own     pf    root:icinga
perm    pf    0640

this allowed the group icinga to use pfctl, but now I get:
pfctl: Failed to open netlink: Bad file descriptor

does anyone have a idea what additional change in FreeBSD 15 is required 
to allow a normal user to use pfctl to read information about the pf 
firewall?

Thanks a lot!
Matthias