Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 2 Feb 1999 23:46:47 -0500 (EST)
From:      Garrett Wollman <wollman@khavrinen.lcs.mit.edu>
To:        Matthew Dillon <dillon@apollo.backplane.com>
Cc:        "Jordan K. Hubbard" <jkh@zippy.cdrom.com>, "Jonathan M. Bresler" <jmb@FreeBSD.ORG>, woodford@cc181716-a.hwrd1.md.home.com, security@FreeBSD.ORG
Subject:   Re: tcpdump 
Message-ID:  <199902030446.XAA23158@khavrinen.lcs.mit.edu>
In-Reply-To: <199902030352.TAA42425@apollo.backplane.com>
References:  <9575.918011566@zippy.cdrom.com> <199902030352.TAA42425@apollo.backplane.com>

next in thread | previous in thread | raw e-mail | index | archive | help
<<On Tue, 2 Feb 1999 19:52:13 -0800 (PST), Matthew Dillon <dillon@apollo.backplane.com> said:

>     Well, not having bpfilter enabled by default doesn't 
>     really enhance security since the kernel module loader
>     *is* enabled by default.

It still appears to be beyond the pale of the script kiddies to
rewrite an Ethernet driver in order to enable it to hand off packets
to BPF.  Hopefully it will stay that way for a little while longer.

-GAWollman

--
Garrett A. Wollman   | O Siem / We are all family / O Siem / We're all the same
wollman@lcs.mit.edu  | O Siem / The fires of freedom 
Opinions not those of| Dance in the burning flame
MIT, LCS, CRS, or NSA|                     - Susan Aglukark and Chad Irschick

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199902030446.XAA23158>