On June 15, 2026 5:49:06 GMT+02:00, ed@groovyexpress.com wrote:
>I had ported the Rust version a couple of months ago which I think
>you'd be interested in since it adds flexibility in how you give
>file and doas access to the (new) reaction user instead of giving
>reaction root access.
My bad, somehow missed it, nice work! I see your point regarding root
access but I'm not sure if it's worth it to add a system user,
especially if we perhaps develop a plugin specifically for pf later via
the ioctl, similarly to the Linux plugin counterparts (maybe)

>Some notes about the port I forgot to mention:
>The port is written from scratch since I wasn't sure if people
>would want to specifically keep the Go version for their systems.
1.x is unsupported, it is not only useless but damaging to keep it in the tree methinks

>The default is that only wheel users get access to the reaction
>socket.
That might be useful tbh

>The rc.d boot script could really use some improvement.
The quick modifications I made to the rc.d script in my version seem to 
work without a hitch at least