pfctl requires root capabilites when checking pf rules

Reply: Kristof Provost : "Re: pfctl requires root capabilites when checking pf rules"
Go to: [ bottom of page ] [ top of archives ] [ this month ]

From: Peter Libassi <peter_at_libassi.se>
Date: Tue, 23 Sep 2025 07:30:14 UTC

I've pkg upgraded 14.3 to 15.0-ALPHA3 and noticed a difference in pfctl.

peter@smaug:~/pf $ uname -aUK
FreeBSD smaug 15.0-ALPHA3 FreeBSD 15.0-ALPHA3 stable/15-n280233-26988773d1da GENERIC amd64 1500064 1500064

peter@smaug:~/pf $ pfctl -nvf pf.conf 
pfctl: Failed to open netlink: Bad file descriptor

peter@smaug:~/pf $ id
uid=1001(peter) gid=1001(peter) groups=0(wheel),1001(peter)

peter@smaug:~/pf $ doas pfctl -nvf pf.conf
(works)

Is this (new) expected behavior, incomplete upgrade or a bug?

Let me know if you need a bug report.

Regards
Peter Libassi