[Bug 296838] pf: cannot reload ruleset in securelevel 2

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296838

--- Comment #5 from crest@rlwinm.de ---
It needs something like this to change the check from greater equal back to
greater than, but before that can be safely committed all over users of this
API have to be checked (does it even have any?):

--- a/sys/netlink/netlink_generic.c
+++ b/sys/netlink/netlink_generic.c
@@ -150,7 +150,7 @@ genl_handle_message(struct nlmsghdr *hdr, struct nl_pstate
*npt)
        }

        if (cmd->cmd_securelevel > 0 &&
-           securelevel_ge(nlp_get_cred(nlp), cmd->cmd_securelevel)) {
+           securelevel_gt(nlp_get_cred(nlp), cmd->cmd_securelevel)) {
                NLP_LOG(LOG_DEBUG, nlp, "family %s: cmd %d securelevel_gt()
failed",
                    gf->family_name, ghdr->cmd);
                return (EPERM);
--

-- 
You are receiving this mail because:
You are the assignee for the bug.