[Bug 296838] pf: cannot reload ruleset in securelevel 2

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D296838

--- Comment #5 from [email protected] ---
It needs something like this to change the check from greater equal back to
greater than, but before that can be safely committed all over users of this
API have to be checked (does it even have any?):

--- a/sys/netlink/netlink_generic.c
+++ b/sys/netlink/netlink_generic.c
@@ -150,7 +150,7 @@ genl_handle_message(struct nlmsghdr *hdr, struct nl_pst=
ate
*npt)
        }

        if (cmd->cmd_securelevel > 0 &&
-           securelevel_ge(nlp_get_cred(nlp), cmd->cmd_securelevel)) {
+           securelevel_gt(nlp_get_cred(nlp), cmd->cmd_securelevel)) {
                NLP_LOG(LOG_DEBUG, nlp, "family %s: cmd %d securelevel_gt()
failed",
                    gf->family_name, ghdr->cmd);
                return (EPERM);
--

--=20
You are receiving this mail because:
You are the assignee for the bug.=