Date: Mon, 03 Aug 2026 16:02:44 +0000 From: bugzilla-noreply@freebsd.org To: pf@FreeBSD.org Subject: [Bug 296838] pf: cannot reload ruleset in securelevel 2 Message-ID: <bug-296838-16861-b31AawhhBa@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-296838-16861@https.bugs.freebsd.org/bugzilla/>
index | next in thread | previous in thread | raw e-mail
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296838 --- Comment #10 from commit-hook@FreeBSD.org --- A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/src/commit/?id=d13dffa150d17dc239e164ea42ddab91e6fab466 commit d13dffa150d17dc239e164ea42ddab91e6fab466 Author: Kristof Provost <kp@FreeBSD.org> AuthorDate: 2026-07-21 13:03:24 +0000 Commit: Kristof Provost <kp@FreeBSD.org> CommitDate: 2026-08-03 16:00:04 +0000 pf: fix securelevel off-by-one cmd_securelevel is the securelevel at which the call should be denied. pf (write) calls should be denied at level 3 or up (not at 2 or up as it was), so increment these all by one. PR: 296838 MFC after: 4 weeks Sponsored by: Rubicon Communications, LLC ("Netgate") Differential Revision: https://reviews.freebsd.org/D58377 sys/netpfil/pf/pf_nl.c | 94 +++++++++++++++++++++++++------------------------- 1 file changed, 47 insertions(+), 47 deletions(-) -- You are receiving this mail because: You are the assignee for the bug.home | help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-296838-16861-b31AawhhBa>