Re: [PATCH net 2/3] ovpn: explicitly reject netlink attr PEER_LOCAL_PORT in CMD_PEER_NEW/SET

Jakub Kicinski
2025-07-15T15:06:32Z

On Tue, 15 Jul 2025 16:36:40 +0200 Antonio Quartulli wrote:
> As Jakub predicted, I am hitting a problem with PEER_GET: the
> attribute-set is one for the entire op, therefore I can't specify two
> different sets for request and reply.
>
> I presume I need to leave PEER_GET on the main 'ovpn' set and then
> opencode the restriction of having only the ID in the request.
>
> Similarly goes for KEY_GET.
>
> Sabrina, Jakub, does it make sense to you?

Yes :( Sorry for the mixed solution but I think using the spec to its
full capabilities is worthwhile, even if it doesn't cover all the needs.