Page MenuHomeFreeBSD
Differential D58377

pf: fix securelevel off-by-one
ClosedPublic
Actions

Authored by kp on Jul 21 2026, 3:08 PM.
Tags
None
Referenced Files
F174252774: D58377.diff
Thu, Oct 1, 6:17 PM
Unknown Object (File)
Tue, Sep 29, 1:58 PM
Unknown Object (File)
Wed, Sep 23, 10:34 AM
Unknown Object (File)
Fri, Sep 18, 9:26 PM
Unknown Object (File)
Wed, Sep 16, 11:30 PM
Unknown Object (File)
Wed, Sep 16, 5:45 PM
Unknown Object (File)
Wed, Sep 16, 5:23 PM
Unknown Object (File)
Wed, Sep 16, 5:23 PM
View All 44 Files
Subscribers
emaste
farrokhi
glebius
imp
melifaro
shuriku_shurik.kiev.ua
vegeta_tuxpowered.net

Details

Reviewers
None
Group Reviewers
pfsense
network
Commits
rG8b10eb844c4b: pf: fix securelevel off-by-one
rGd13dffa150d1: pf: fix securelevel off-by-one
Summary

cmd_securelevel is the securelevel at which the call should be denied.
pf (write) calls should be denied at level 3 or up (not at 2 or up as it
was), so increment these all by one.

PR: 296838
MFC after: 1 week
Sponsored by: Rubicon Communications, LLC ("Netgate")

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 74980
Build 71863: arc lint + arc unit

Revision Contents
Changeset List

PathSize
sys/
netpfil/
pf/
94 lines

Diff 182384

View Options

sys/netpfil/pf/pf_nl.c

Loading...