Date: Mon, 8 Aug 2016 11:22:27 -0700 From: Nathan Whitehorn <nwhitehorn@freebsd.org> To: Glen Barber <gjb@FreeBSD.org> Cc: Lars Engels <lars.engels@0x20.net>, Devin Teske <dteske@FreeBSD.org>, freebsd-current@FreeBSD.org, freebsd-stable@FreeBSD.org, FreeBSD Release Engineering Team <re@FreeBSD.org> Subject: Re: FreeBSD 11.0-BETA4 Now Available Message-ID: <f7ce1694-5df9-1065-610e-6bdafe265b7e@freebsd.org> In-Reply-To: <20160808175632.GJ2008@FreeBSD.org> References: <20160806210526.GJ50364@FreeBSD.org> <20160808084830.GP148@e-new.0x20.net> <20160808144405.GD2008@FreeBSD.org> <20160808150207.GA148@e-new.0x20.net> <0DC3A3B2-6915-4203-B9EB-4C46A5809B1C@freebsd.org> <20160808174350.GB148@e-new.0x20.net> <7e621f3a-8659-3cc1-01ac-3360dcb89604@freebsd.org> <20160808175632.GJ2008@FreeBSD.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On 08/08/16 10:56, Glen Barber wrote: > On Mon, Aug 08, 2016 at 10:53:26AM -0700, Nathan Whitehorn wrote: >> >> On 08/08/16 10:43, Lars Engels wrote: >>> On Mon, Aug 08, 2016 at 10:15:07AM -0700, Devin Teske wrote: >>>>> On Aug 8, 2016, at 8:02 AM, Lars Engels <lars.engels@0x20.net> wrote: >>>>> >>>>> On Mon, Aug 08, 2016 at 02:44:05PM +0000, Glen Barber wrote: >>>>>> On Mon, Aug 08, 2016 at 10:48:30AM +0200, Lars Engels wrote: >>>>>>> On Sat, Aug 06, 2016 at 09:05:26PM +0000, Glen Barber wrote: >>>>>>>> -----BEGIN PGP SIGNED MESSAGE----- >>>>>>>> o The new system hardening options have been fixed to avoid overwriting >>>>>>>> other options selected during install time. >>>>>>> Can those options also get added to "bsdconfig"? >>>>>> You would have to ask the bsdconfig maintainer(s). >>>>>> >>>>> Cc'ing dteske. >>>>> >>>> What aspects of bsdconfig need updating? >>> bsdinstall has a new "hardening" module. AFAIK bsdinstall and bsdconfig >>> share a lot of code, so bsdconfig should probably also offer the >>> "hardening" module. >> The hardening module should probably just be a part of bsdconfig, actually, >> and an option to open bsdconfig be an option at the end of the installer. >> > In order for that to be an option, I'd strongly suggest updating > bsdconfig to properly detect packages on the DVD (which it has not since > 10.0-RELEASE), as it makes too many incorrect assumptions. > > Glen > It's way too late for this for 11.0. I was just making a general statement. I think things are fine as they are for the upcoming release. -Nathan
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?f7ce1694-5df9-1065-610e-6bdafe265b7e>