David Leadbeater <[email protected]> wrote: > CVSROOT: /cvs > Module name: src > Changes by: [email protected] 2026/09/17 16:09:55 > > Modified files: > sys/kern : kern_pledge.c > > Log message: > The relaxation to permit TCP_NODELAY on AF_UNIX through pledge shouldn't > check the socket's protocol. This should be revisited later as it allows > slightly more than desired, but unbreaks some software.
This means pledge does not block the setsockopt operation (with an abort failure) the return (0) means the setsockopt proceeds to call into the network stack code, which finds this request disagreeable and returns the error everyone has always seen (and quite obviously, ignored, which is why people keep trying wrong setsockopt on sockets)
