On Wed, Mar 25, 2026 at 08:48:20PM +0100, Christoph Liebender wrote:
> On 3/25/26 20:14, Stuart Henderson wrote:
> > reads ok, *if* the patch to use unveil has been tested on recent
> > -current
> 
> I build and use mollysocket with this patch on -stable with the latest
> patches - I assume that includes relevant changes to unveil as well?

Nope.  Commits to -current should be tested on a -current system. ;)

> That being said, I just tested mollysocket in airgapped mode on my -current
> laptop. It seems to work ok.
> 
> FWIW, make test is happy as well.

As long as you're not using PORTS_PRIVSEP + default pf.conf.  Tests
look good after letting _pbuld talk to the network.  Started the
server on -current too but I haven't tested actual usage.  I'd say
your testing is sufficient though.  (I haven't looked at the diff
itself.)

-- 
jca