[Bug 296838] pf: cannot reload ruleset in securelevel 2

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D296838

--- Comment #4 from [email protected] ---
Yep it's an off by one caused by the difference between > and >=3D semantic=
s.
Compare sys/netpfil/pf/pf_ioctl.c:3852 to sys/netlink/netlink_generic.c:152.
The old code does a `if (securelevel_gt(td->td_ucred, 2))` and the new code
checks for `securelevel_ge(nlp_get_cred(nlp), cmd->cmd_securelevel)`. Notice
the _gt vs. _ge suffix?

@Bugmeister: can you please assign this to a PF maintainer?

--=20
You are receiving this mail because:
You are the assignee for the bug.=