Bug 81540

Summary: Pf bug in FreeBSD 5.3 errata page its wrong
Product: Documentation Reporter: Victor Balada Diaz <victor>
Component: Books & ArticlesAssignee: Bruce A. Mah <bmah>
Status: Closed FIXED    
Severity: Affects Only Me    
Priority: Normal    
Version: Latest   
Hardware: Any   
OS: Any   

Description Victor Balada Diaz 2005-05-27 03:20:01 UTC 
	In the errata page of FreeBSD 5.3 release its documented a pf bug:

	(31 Oct 2004) When the user/group rule clauses in pf(4) and ipfw(4)
	are used, the loader tunable debug.mpsafenet must be set to 0 (this
	is 1 by default). For example, the following rules are affected:

	the problem is that you can panic the machine even with mpsafenet
	disabled when you're using the user clause.

Fix: 

Put in the errata page something like "Using the user/group clauses
	in pf can panic the system, so don't use it."
Comment 1 Bruce A. Mah freebsd_committer freebsd_triage 2005-05-28 21:15:41 UTC 
If memory serves me right, Victor Balada Diaz wrote:

> >Description:
> 	In the errata page of FreeBSD 5.3 release its documented a pf bug:
> 
> 	(31 Oct 2004) When the user/group rule clauses in pf(4) and ipfw(4)
> 	are used, the loader tunable debug.mpsafenet must be set to 0 (this
> 	is 1 by default). For example, the following rules are affected:
> 
> 	the problem is that you can panic the machine even with mpsafenet
> 	disabled when you're using the user clause.
> 
> 
> >How-To-Repeat:
> 	
> >Fix:
> 	Put in the errata page something like "Using the user/group clauses
> 	in pf can panic the system, so don't use it."


Because of the way that the errata are currently maintained in the
source tree, it is not feasible to make any more changes or updates to
the 5.3 errata.  This PR should probably be closed.

Bruce.
Comment 2 Bruce A. Mah freebsd_committer freebsd_triage 2005-05-29 18:23:19 UTC 
State Changed
From-To: open->closed

We stopped updating the 5.3 errata after 5.4 was released. 

On a longer-term note, there are some discussions taking place 
about we can do a better job maintaining errata (especially for 
extended-life branches). 

Thanks for mentioning this!
Comment 3 Bruce A. Mah freebsd_committer freebsd_triage 2005-05-29 18:23:19 UTC 
Responsible Changed
From-To: freebsd-doc->bmah

I closed this PR, so take ownership.