From owner-svn-src-projects@FreeBSD.ORG Fri Jun 29 15:27:18 2012 Return-Path: Delivered-To: svn-src-projects@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 8E2951065674; Fri, 29 Jun 2012 15:27:18 +0000 (UTC) (envelope-from glebius@FreeBSD.org) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:4f8:fff6::2c]) by mx1.freebsd.org (Postfix) with ESMTP id 7965C8FC1A; Fri, 29 Jun 2012 15:27:18 +0000 (UTC) Received: from svn.freebsd.org (localhost [127.0.0.1]) by svn.freebsd.org (8.14.4/8.14.4) with ESMTP id q5TFRIG4053658; Fri, 29 Jun 2012 15:27:18 GMT (envelope-from glebius@svn.freebsd.org) Received: (from glebius@localhost) by svn.freebsd.org (8.14.4/8.14.4/Submit) id q5TFRIqD053656; Fri, 29 Jun 2012 15:27:18 GMT (envelope-from glebius@svn.freebsd.org) Message-Id: <201206291527.q5TFRIqD053656@svn.freebsd.org> From: Gleb Smirnoff Date: Fri, 29 Jun 2012 15:27:18 +0000 (UTC) To: src-committers@freebsd.org, svn-src-projects@freebsd.org X-SVN-Group: projects MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Cc: Subject: svn commit: r237791 - projects/pf/head/contrib/pf/man X-BeenThere: svn-src-projects@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "SVN commit messages for the src " projects" tree" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 29 Jun 2012 15:27:18 -0000 Author: glebius Date: Fri Jun 29 15:27:17 2012 New Revision: 237791 URL: http://svn.freebsd.org/changeset/base/237791 Log: The locking problem between pf and PCBs no longer exists. Modified: projects/pf/head/contrib/pf/man/pf.conf.5 Modified: projects/pf/head/contrib/pf/man/pf.conf.5 ============================================================================== --- projects/pf/head/contrib/pf/man/pf.conf.5 Fri Jun 29 15:24:55 2012 (r237790) +++ projects/pf/head/contrib/pf/man/pf.conf.5 Fri Jun 29 15:27:17 2012 (r237791) @@ -28,7 +28,7 @@ .\" ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE .\" POSSIBILITY OF SUCH DAMAGE. .\" -.Dd May 28 2012 +.Dd June 29 2012 .Dt PF.CONF 5 .Os .Sh NAME @@ -1421,7 +1421,7 @@ has the socket open where the packet is (depending on which socket is local). This is in addition to the normal information logged. .Pp -Due to the problems described in the BUGS section only the first packet +Only the first packet logged via .Ar log (all, user) will have the user credentials logged when using stateful matching. @@ -3040,22 +3040,6 @@ Protocol name database. .It Pa /etc/services Service name database. .El -.Sh BUGS -Due to a lock order reversal (LOR) with the socket layer, the use of the -.Ar group -and -.Ar user -filter parameter in conjuction with a Giant-free netstack -can result in a deadlock. -A workaround is available under the -.Va debug.pfugidhack -sysctl which is automatically enabled when a -.Ar user -/ -.Ar group -rule is added or -.Ar log (user) -is specified. .Sh SEE ALSO .Xr altq 4 , .Xr carp 4 ,