summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorkn <kn@cvs.openbsd.org>2018-10-01 19:47:31 +0000
committerkn <kn@cvs.openbsd.org>2018-10-01 19:47:31 +0000
commit63a471972e4849f896b0c5ed2f1c689cd8a38396 (patch)
tree24cc7ec9d249771d4370c3dff23a3f2f92698c04
parentad1f9284ce3f8123f1b6987b1bdd066252938a3b (diff)
Allow DIOCRGETADDRS when securelevel(7) > 1
This fixes certain operations such as `pfctl -t foo -T show' when the system is in "Highly secure mode". `pfctl -t foo -T show -v' would already work due to a different ioctl (DIOCRGETASTATS) being used. Reported by Zbyszek Żółkiewski, thanks! OK sthen sashan
-rw-r--r--sys/net/pf_ioctl.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/sys/net/pf_ioctl.c b/sys/net/pf_ioctl.c
index 72774436aa0..1bd62586efc 100644
--- a/sys/net/pf_ioctl.c
+++ b/sys/net/pf_ioctl.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: pf_ioctl.c,v 1.337 2018/09/11 07:53:38 sashan Exp $ */
+/* $OpenBSD: pf_ioctl.c,v 1.338 2018/10/01 19:47:30 kn Exp $ */
/*
* Copyright (c) 2001 Daniel Hartmeier
@@ -951,6 +951,7 @@ pfioctl(dev_t dev, u_long cmd, caddr_t addr, int flags, struct proc *p)
case DIOCRADDADDRS:
case DIOCRDELADDRS:
case DIOCRSETADDRS:
+ case DIOCRGETADDRS:
case DIOCRGETASTATS:
case DIOCRCLRASTATS:
case DIOCRTSTADDRS: