[Bug 291981] authpf/pfctl DIOCBEGINADDRS: Operation not permitted

[email protected] Mon, 29 Dec 2025 22:10:20 +0000
Newsgroups gmane.os.freebsd.devel.pf4freebsd
Message-ID <[email protected]/bugzilla/>
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291981

--- Comment #3 from Kristof Provost <[email protected]> ---
(In reply to freebsd from comment #2)
> Is there a fix/workaround planned, or need to wait until netlink fine grained access control for pf with a kind of setcap has been implemented ?

You'll need to wait for that, yes. I'm mostly in the dark myself about when
netlink will grow the required support.

> I would like to avoid to give the authpf users write permissions to /dev/pf device

That's how that was traditionally done. The netlink interface doesn't have that
option, that's the source of your problem.

-- 
You are receiving this mail because:
You are the assignee for the bug.