[Bug 296838] pf: cannot reload ruleset in securelevel 2

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296838

--- Comment #4 from crest@rlwinm.de ---
Yep it's an off by one caused by the difference between > and >= semantics.
Compare sys/netpfil/pf/pf_ioctl.c:3852 to sys/netlink/netlink_generic.c:152.
The old code does a `if (securelevel_gt(td->td_ucred, 2))` and the new code
checks for `securelevel_ge(nlp_get_cred(nlp), cmd->cmd_securelevel)`. Notice
the _gt vs. _ge suffix?

@Bugmeister: can you please assign this to a PF maintainer?

-- 
You are receiving this mail because:
You are the assignee for the bug.