![elad](/assets/img/avatar_default.png)
sysctl(9) flags CTLFLAG_READONLY[12]. luckily they're not documented so it's only half regression. only two knobs used them; proc.curproc.corename (check added in the existing handler; its CTLFLAG_ANYWRITE, yay) and net.inet.ip.forwsrcrt, that got its own handler now too.