Re: So, back on the topic of enabling bpf in GENERIC...

[Warner Losh]

In message <[EMAIL PROTECTED]> "Jordan K. Hubbard" writes:
: It already is.  That's not the question under discussion here - we're
: talking about how to make things work in the post-installation boot
: scenario.

I'm in favor of having it in the kernel by default.  With one
proviso.  Any place where we talk about locking down a FreeBSD
machine, we'd need to make it explicit that bpf should be turned off
when you wish to make it hard for intruders to get packets off your
wire in a root compromize situation.

I wonder if /dev/bpf should be disabled when secure level is > 1 or
2...

Warner


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message