kern/57492: Firewall can be disabled in securelevel 3

[Ruslan Ermilov]

Synopsis: Firewall can be disabled in securelevel 3

State-Changed-From-To: open->closed
State-Changed-By: ru
State-Changed-When: Thu Oct 2 05:05:26 PDT 2003
State-Changed-Why: 
# uname -r
4.9-PRERELEASE
# sysctl kern.securelevel
kern.securelevel: -1
# sysctl net.inet.ip.fw.enable=0
net.inet.ip.fw.enable: 1 -> 0
# sysctl net.inet.ip.fw.enable=1
net.inet.ip.fw.enable: 0 -> 1
# sysctl kern.securelevel=3
kern.securelevel: -1 -> 3
# sysctl net.inet.ip.fw.enable=0
net.inet.ip.fw.enable: 1
sysctl: net.inet.ip.fw.enable: Operation not permitted

http://www.freebsd.org/cgi/query-pr.cgi?pr=57492