From owner-freebsd-security Tue Feb 2 20:46:58 1999 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id UAA15044 for freebsd-security-outgoing; Tue, 2 Feb 1999 20:46:58 -0800 (PST) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from khavrinen.lcs.mit.edu (khavrinen.lcs.mit.edu [18.24.4.193]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id UAA15034; Tue, 2 Feb 1999 20:46:55 -0800 (PST) (envelope-from wollman@khavrinen.lcs.mit.edu) Received: (from wollman@localhost) by khavrinen.lcs.mit.edu (8.9.1/8.9.1) id XAA23158; Tue, 2 Feb 1999 23:46:47 -0500 (EST) (envelope-from wollman) Date: Tue, 2 Feb 1999 23:46:47 -0500 (EST) From: Garrett Wollman Message-Id: <199902030446.XAA23158@khavrinen.lcs.mit.edu> To: Matthew Dillon Cc: "Jordan K. Hubbard" , "Jonathan M. Bresler" , woodford@cc181716-a.hwrd1.md.home.com, security@FreeBSD.ORG Subject: Re: tcpdump In-Reply-To: <199902030352.TAA42425@apollo.backplane.com> References: <9575.918011566@zippy.cdrom.com> <199902030352.TAA42425@apollo.backplane.com> Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org < said: > Well, not having bpfilter enabled by default doesn't > really enhance security since the kernel module loader > *is* enabled by default. It still appears to be beyond the pale of the script kiddies to rewrite an Ethernet driver in order to enable it to hand off packets to BPF. Hopefully it will stay that way for a little while longer. -GAWollman -- Garrett A. Wollman | O Siem / We are all family / O Siem / We're all the same wollman@lcs.mit.edu | O Siem / The fires of freedom Opinions not those of| Dance in the burning flame MIT, LCS, CRS, or NSA| - Susan Aglukark and Chad Irschick To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message