From: "Theo de Raadt" <deraadt@openbsd.org>
Subject: Re: chromium: disable IP_TOS for UDP
To: robert@openbsd.org, ports@openbsd.org
Date: Tue, 08 Sep 2026 16:52:00 -0600

Should our kernel play a different kind of game here?

Index: /sys/kern/kern_pledge.c
===================================================================
RCS file: /cvs/src/sys/kern/kern_pledge.c,v
diff -u -p -u -r1.365 kern_pledge.c
--- /sys/kern/kern_pledge.c	4 Sep 2026 02:38:28 -0000	1.365
+++ /sys/kern/kern_pledge.c	8 Sep 2026 22:51:22 -0000
@@ -1447,6 +1460,8 @@ pledge_sockopt(struct proc *p, int set, 
 			switch (optname) {
 			case IP_TOS:
 				return (0);
+			case IPV6_TCLASS:
+				return (-1);
 			}
 		}
 		break;
@@ -1455,6 +1470,8 @@ pledge_sockopt(struct proc *p, int set, 
 			switch (optname) {
 			case IPV6_TCLASS:
 				return (0);
+			case IPV6_TCLASS:
+				return (-1);
 			}
 		}
 		break;