From 8bb0f1b87b80fd0a9c9dc388851cb609298d36ef Mon Sep 17 00:00:00 2001
From: Kristof Provost <kp@FreeBSD.org>
Date: Thu, 15 Apr 2021 13:41:07 +0200
Subject: [PATCH] pf: Remove PFRULE_REFS from userspace

PFRULE_REFS should never be used by userspace, so hide it behind #ifdef
_KERNEL.

MFC after:	never
Sponsored by:	Rubicon Communications, LLC ("Netgate")
Differential Revision:	https://reviews.freebsd.org/D29779
---
 sys/netpfil/pf/pf.h | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/sys/netpfil/pf/pf.h b/sys/netpfil/pf/pf.h
index d7063e70b0af..4192b1a5bc95 100644
--- a/sys/netpfil/pf/pf.h
+++ b/sys/netpfil/pf/pf.h
@@ -561,7 +561,10 @@ struct pf_rule {
 #define	PFRULE_NOSYNC		0x0010
 #define PFRULE_SRCTRACK		0x0020  /* track source states */
 #define PFRULE_RULESRCTRACK	0x0040  /* per rule */
+
+#ifdef _KERNEL
 #define	PFRULE_REFS		0x0080	/* rule has references */
+#endif
 
 /* scrub flags */
 #define	PFRULE_NODF		0x0100