Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 27 May 2005 04:18:05 +0200 (CEST)
From:      Victor Balada Diaz <victor@bsdes.net>
To:        FreeBSD-gnats-submit@FreeBSD.org
Subject:   docs/81540: Pf bug in FreeBSD 5.3 errata page its wrong
Message-ID:  <200505270218.j4R2I5f2014975@alf.dyndns.ws>
Resent-Message-ID: <200505270220.j4R2K12o004090@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help

>Number:         81540
>Category:       docs
>Synopsis:       Pf bug in FreeBSD 5.3 errata page its wrong
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-doc
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          doc-bug
>Submitter-Id:   current-users
>Arrival-Date:   Fri May 27 02:20:01 GMT 2005
>Closed-Date:
>Last-Modified:
>Originator:     Victor Balada Diaz
>Release:        FreeBSD 5.3-RELEASE-p15 i386
>Organization:
>Environment:
System: FreeBSD alf.dyndns.ws 5.3-RELEASE-p15 FreeBSD 5.3-RELEASE-p15 #0: Thu May 26 21:13:13 CEST 2005 victor@equilibrium.euesrg02.net:/usr/obj/usr/src/sys/EQUILIBRIUM i386


	
>Description:
	In the errata page of FreeBSD 5.3 release its documented a pf bug:

	(31 Oct 2004) When the user/group rule clauses in pf(4) and ipfw(4)
	are used, the loader tunable debug.mpsafenet must be set to 0 (this
	is 1 by default). For example, the following rules are affected:

	the problem is that you can panic the machine even with mpsafenet
	disabled when you're using the user clause.


>How-To-Repeat:
	
>Fix:
	Put in the errata page something like "Using the user/group clauses
	in pf can panic the system, so don't use it."

	


>Release-Note:
>Audit-Trail:
>Unformatted:



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200505270218.j4R2I5f2014975>