On Sat, Sep 01, 2018 at 10:38:09PM +0200, Sebastian Benoit wrote: > Remi Locherer(remi.loche...@relo.ch) on 2018.09.01 21:53:21 +0200: > > Hi, > > > > Since slaacd is able to use pledge in the parent process I thought it may > > be possible for ospfd too. > > > > It works fine until ospfd gets reloaded. At this point it uses setsockopt > > to set the priority filter on the routing socket. > > > > Since I could not find a promise for this I extended wroute. Does this make > > sense? Would another promise or something completely different be better? > > just route would be good enough, because route is for receiving routes, > and the route filter just changes which routes you get.
ospfd is not happy with "pledge("stdio rpath sendfd route", NULL)" During reload: kr_reload: priority filter disabled orig_rtr_lsa: area 0.0.0.0 Abort trap (core dumped) orig_rtr_lsa: stub net, interface pair0 orig_rtr_lsa: stub net, interface vether0 [...] ospfd[2432]: pledge "inet", syscall 105 > > does the > > area ... { > demote carp > .... > } I didn't test this initially. But to me it looks like this feature does not work anymore. With my little test setup the demote counter never increases. I'll have a closer look. > > feature and the > > > interface if { demote carp ... } > > feature still work with this pledge?