On 6/25/25 21:59, Kyle Evans wrote:
The branch main has been updated by kevans:
URL:
https://cgit.FreeBSD.org/src/commit/?id=f6d9e22982a1d0354c0199e94ebdb4474eaa74b9
commit f6d9e22982a1d0354c0199e94ebdb4474eaa74b9
Author: Kyle Evans <kev...@freebsd.org>
AuthorDate: 2025-06-26 02:57:03 +0000
Commit: Kyle Evans <kev...@freebsd.org>
CommitDate: 2025-06-26 02:58:25 +0000
wg: ipc: add allowed-ip flags support for FreeBSD
For $reasons, we can't rely on flags in wireguard-tools for the kernel
side of WireGuard. Provide a mapping function that uses flags from the
kernel that we're building against and fail the operation if we made it
to the end without turning some wg(8) flag off.
Signed-off-by: Kyle Evans <kev...@freebsd.org>
Reviewed by: ivy (previous version), Jason A. Donenfeld, jhb
Differential Revision: https://reviews.freebsd.org/D50450
I forgot to fix the commit message here before pushing, sorry. The
mapping function got dropped in the final version, and we instead just
assume definitions that match wg(8) on the kernel side
(WGALLOWEDIP_REMOVE_ME). I've fixed the message in the branch I've
pushed towards wireguard-tools for upstream consideration, not that that
really helps us here.
Thanks,
Kyle Evans
