[Bug 296838] pf: cannot reload ruleset in securelevel 2

[email protected] Mon, 03 Aug 2026 16:02:44 +0000
Newsgroups gmane.os.freebsd.devel.pf4freebsd
Message-ID <[email protected]/bugzilla/>
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D296838

--- Comment #10 from [email protected] ---
A commit in branch main references this bug:

URL:
https://cgit.FreeBSD.org/src/commit/?id=3Dd13dffa150d17dc239e164ea42ddab91e=
6fab466

commit d13dffa150d17dc239e164ea42ddab91e6fab466
Author:     Kristof Provost <[email protected]>
AuthorDate: 2026-07-21 13:03:24 +0000
Commit:     Kristof Provost <[email protected]>
CommitDate: 2026-08-03 16:00:04 +0000

    pf: fix securelevel off-by-one

    cmd_securelevel is the securelevel at which the call should be denied.
    pf (write) calls should be denied at level 3 or up (not at 2 or up as it
    was), so increment these all by one.

    PR:             296838
    MFC after:      4 weeks
    Sponsored by:   Rubicon Communications, LLC ("Netgate")
    Differential Revision:  https://reviews.freebsd.org/D58377

 sys/netpfil/pf/pf_nl.c | 94 +++++++++++++++++++++++++---------------------=
----
 1 file changed, 47 insertions(+), 47 deletions(-)

--=20
You are receiving this mail because:
You are the assignee for the bug.=