Re: pfioctl: DIOCGETRULESET{,S}: drop net lock

2023-05-03 Thread Alexandr Nedvedicky
Hello, On Sat, Apr 29, 2023 at 01:37:52PM +, Klemens Nanni wrote: > Both walk the list of rulesets aka. anchors, first one yields a count, > second yields a specific's anchor name. > > Same data access pattern, different copy out, basically. > > pf_anchor_global are contained within

pfioctl: DIOCGETRULESET{,S}: drop net lock

2023-04-29 Thread Klemens Nanni
Both walk the list of rulesets aka. anchors, first one yields a count, second yields a specific's anchor name. Same data access pattern, different copy out, basically. pf_anchor_global are contained within pf_ioctl.c and pf_ruleset.c and fully protected by the pf lock. Same for pf_main_ruleset