rc.d: use absolute path for python3 in maltrailsensor + maltrailserver (#5466)
service(8) invokes rc.d scripts with PATH=/sbin:/bin:/usr/sbin:/usr/bin
via `env -i`, which does not include /usr/local/bin where python3 lives.
daemon(8)'s execvp("python3") ENOENTs all four PATH entries and the
supervisor exits silently after the pre-detach parent has already
returned 0 to rc.subr. Net result: service start exits 0 with nothing
running, and boot-time autostart is broken when maltrailsensor_enable=YES.
Use absolute path /usr/local/bin/python3 to bypass the PATH lookup,
matching the convention used by other OPNsense plugin rc.d scripts
(stunnel, ddclient, tinc, openconnect).
Validated on OPNsense 26.4 / FreeBSD 14.3-RELEASE-p12 across
3 start/stop cycles + truss re-trace + full cold-start reboot.
Co-authored-by: Tom Reid <tokamaktx at users.noreply.github.com>
net/frr: BGP Improve visibility in ModelRelationFields and enable internalModelUseSafeDelete (#5461)
* net/frr: Improve visibility in ModelRelationFields and enable internalModelUseSafeDelete
* Adjust BGP template to only emit a single set for multiple selected items with the same name
dns/rfc2136: allow "*." prefix in hostname for wildcard updates (#5460)
When using rfc2136 dynamic DNS, users may want the same address
record to apply to every subdomain of the configured hostname (e.g.
for host.example.org and *.host.example.org to resolve to the same IP).
net/frr: OSPF/OSPF6 More visibility and safety for ModelRelationField references (#5459)
* Allow multiple prefix list selections in a route map in OSPF6 as well
* Improve visibility for route-maps and prefix-lists in OSPF/OSPF6 and enable internalModelUseSafeDelete
security/strongswan-legacy: follow core in naming IPv4+6 "any"
This will die eventually since "inet46" is only in the legacy code,
but in order to mark this spot as done we do the rename.