David Leadbeater <dgl@dgl.cx> wrote:

> On Wed, Sep 09, 2026 at 10:12:33AM +1000, David Leadbeater wrote:
> [...]
> > ...therefore I don't think the translation is needed, only this allowing
> > setting IP_TOS for AF_INET6 (i.e. just the kern_pledge.c change
> > in the diff).
> 
> When I say "allowing" I mean not resulting in a pledge failure, callers
> should obviously handle the errno return.

They won't.

If they do handle it, they will probably do some arbitrary invariant that
still creates problems.