From owner-freebsd-arch Wed Mar 14 18:25:44 2001 Delivered-To: freebsd-arch@freebsd.org Received: from acampi.inet.it (acampi.inet.it [213.92.4.194]) by hub.freebsd.org (Postfix) with SMTP id 8F5DD37B71C for ; Wed, 14 Mar 2001 18:25:38 -0800 (PST) (envelope-from andrea@webcom.it) Received: (qmail 2820 invoked from network); 15 Mar 2001 03:24:52 -0000 Received: from unknown (HELO webcom.it) (212.239.10.243) by acampi.inet.it with SMTP; 15 Mar 2001 03:24:52 -0000 Received: (qmail 5142 invoked by uid 1000); 15 Mar 2001 02:22:16 -0000 Date: Thu, 15 Mar 2001 03:22:16 +0100 From: Andrea Campi To: Robert Watson Cc: freebsd-arch@freebsd.org Subject: Re: flags settings for modules Message-ID: <20010315032215.G3277@webcom.it> References: <20010314111629.A1018@dragon.nuxi.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from rwatson@freebsd.org on Wed, Mar 14, 2001 at 09:18:05PM -0500 X-Echelon: BND CIA NSA Mossad KGB MI6 IRA detonator nuclear assault strike Sender: owner-freebsd-arch@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Wed, Mar 14, 2001 at 09:18:05PM -0500, Robert Watson wrote: > > The effects of schg can be mitigated by circumventing securelevels, which > is trivial in most installs, especially in our default installs. Enabling > schg in the default install offers little benefit (in fact, it's rather > inconvenient). There are hardened environments where schg can be useful, > but ours is not one of them. I'd like schg turned off in the default > install to unbreak various forms of NFS stuff, and because it's a royal > pain to keep stripping schg from binaries, libraries, modules, and the > kernel when I need to manually twiddle as opposed to using the Makefile, > which happens with surprising frequency as a result of a still-too-small > root partition relative to the size of (kernel + modules). Why don't we make it a make(1) variable? Of course this would be in /etc/defaults/make.conf, or whatever comes out of the discussion... Bye, Andrea -- Loose bits sink chips. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-arch" in the body of the message