On February 13, 2015 6:46:52 PM EST, Brian Buhrow <[email protected]> wrote: > If you are going to disable COMPAT_FREEBSD in GENERIC kernels, then >you probably also need to disable twe(4) and twa(4) as well. I would >not >be in favor of this. Several people have written saying they use >tw_cli. >I've not written, but I too use tw_cli to manage 3ware cards under >NetBSD.
That's not at all the same. Code that can get triggered by an arbitrary executable has a very different attack surface than device drivers that won't be used if you don't have one of those devices in your system. I'm all for trimming things down, but I don't think it's valid to claim that removing COMPAT_FREEBSD implies the need to remove anything else. Eric
