[Bug 296838] pf: cannot reload ruleset in securelevel 2
[email protected] Mon, 03 Aug 2026 16:02:44 +0000
| Newsgroups | gmane.os.freebsd.devel.pf4freebsd |
|---|---|
| Message-ID | <[email protected]/bugzilla/> |
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D296838 --- Comment #10 from [email protected] --- A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/src/commit/?id=3Dd13dffa150d17dc239e164ea42ddab91e= 6fab466 commit d13dffa150d17dc239e164ea42ddab91e6fab466 Author: Kristof Provost <[email protected]> AuthorDate: 2026-07-21 13:03:24 +0000 Commit: Kristof Provost <[email protected]> CommitDate: 2026-08-03 16:00:04 +0000 pf: fix securelevel off-by-one cmd_securelevel is the securelevel at which the call should be denied. pf (write) calls should be denied at level 3 or up (not at 2 or up as it was), so increment these all by one. PR: 296838 MFC after: 4 weeks Sponsored by: Rubicon Communications, LLC ("Netgate") Differential Revision: https://reviews.freebsd.org/D58377 sys/netpfil/pf/pf_nl.c | 94 +++++++++++++++++++++++++---------------------= ---- 1 file changed, 47 insertions(+), 47 deletions(-) --=20 You are receiving this mail because: You are the assignee for the bug.=