[Bug 296838] pf: cannot reload ruleset in securelevel 2

From: <bugzilla-noreply_at_freebsd.org>
Date: Mon, 03 Aug 2026 16:02:44 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296838

--- Comment #10 from commit-hook@FreeBSD.org ---
A commit in branch main references this bug:

URL:
https://cgit.FreeBSD.org/src/commit/?id=d13dffa150d17dc239e164ea42ddab91e6fab466

commit d13dffa150d17dc239e164ea42ddab91e6fab466
Author:     Kristof Provost <kp@FreeBSD.org>
AuthorDate: 2026-07-21 13:03:24 +0000
Commit:     Kristof Provost <kp@FreeBSD.org>
CommitDate: 2026-08-03 16:00:04 +0000

    pf: fix securelevel off-by-one

    cmd_securelevel is the securelevel at which the call should be denied.
    pf (write) calls should be denied at level 3 or up (not at 2 or up as it
    was), so increment these all by one.

    PR:             296838
    MFC after:      4 weeks
    Sponsored by:   Rubicon Communications, LLC ("Netgate")
    Differential Revision:  https://reviews.freebsd.org/D58377

 sys/netpfil/pf/pf_nl.c | 94 +++++++++++++++++++++++++-------------------------
 1 file changed, 47 insertions(+), 47 deletions(-)

-- 
You are receiving this mail because:
You are the assignee for the bug.