On 2024/02/28 22:49, Theo Buehler wrote:
> PORTS_PRIVSEP should catch such things. (The CMakeLists file also has
> a tls vs tsl typo)

Plus pf.conf rules to block network access from _pbuild e.g. something
along these lines (the first one is optional but helps with some tests
that otherwise fail)

pass quick proto {tcp udp} to 127.0.0.1 user _pbuild
block return quick proto {tcp udp} user _pbuild