[Bug 296838] pf: cannot reload ruleset in securelevel 2
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Mon, 03 Aug 2026 16:02:44 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296838
--- Comment #10 from commit-hook@FreeBSD.org ---
A commit in branch main references this bug:
URL:
https://cgit.FreeBSD.org/src/commit/?id=d13dffa150d17dc239e164ea42ddab91e6fab466
commit d13dffa150d17dc239e164ea42ddab91e6fab466
Author: Kristof Provost <kp@FreeBSD.org>
AuthorDate: 2026-07-21 13:03:24 +0000
Commit: Kristof Provost <kp@FreeBSD.org>
CommitDate: 2026-08-03 16:00:04 +0000
pf: fix securelevel off-by-one
cmd_securelevel is the securelevel at which the call should be denied.
pf (write) calls should be denied at level 3 or up (not at 2 or up as it
was), so increment these all by one.
PR: 296838
MFC after: 4 weeks
Sponsored by: Rubicon Communications, LLC ("Netgate")
Differential Revision: https://reviews.freebsd.org/D58377
sys/netpfil/pf/pf_nl.c | 94 +++++++++++++++++++++++++-------------------------
1 file changed, 47 insertions(+), 47 deletions(-)
--
You are receiving this mail because:
You are the assignee for the bug.