pf: Return non-zero from 'status' if pf is not enabled

In the pf rc.d script the output of `/etc/rc.d/pf status` or `/etc/rc.d/pf
onestatus` always provided an exit status of zero. This made it fiddly to
programmatically determine if pf was running or not.

Return a non-zero status if the pf module is not loaded, extend pfctl to have
an option to return an error status if pf is not enabled.

PR:		228632
Submitted by:	James Park-Watt <jimmypw AT gmail.com>
MFC after:	1 week

1 files changed, 2 insertions, 0 deletions

diff --git a/etc/rc.d/pf b/etc/rc.d/pf
index 5bd67e600fa4..57de19218fcf 100755
--- a/etc/rc.d/pf
+++ b/etc/rc.d/pf
@@ -66,8 +66,10 @@ pf_status()
 {
 	if ! [ -c /dev/pf ] ; then
 		echo "pf.ko is not loaded"
+		return 1
 	else
 		$pf_program -s info
+		$pf_program -s Running >/dev/null
 	fi
 }