Re: pf log user and group

[Klemens Nanni]

On Mon, Jan 11, 2021 at 05:49:10PM +0100, Alexander Bluhm wrote:
> Sometimes an uid is logged in pflog(4) although the logopt of the
> rule does not specify it.  Check the option again for the log rule
> in case another rule has triggered a socket lookup.  Remove logopt
> group, it is not documented and cannot work as struct pfloghdr does
> not contain a gid.  Rename PF_LOG_SOCKET_LOOKUP to PF_LOG_USER to
> express what it does.  The lookup involved is only an implemntation
> detail.
OK kn