From owner-freebsd-questions@FreeBSD.ORG  Wed Aug 18 05:08:52 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 7119A16A4CE
	for <questions@freebsd.org>; Wed, 18 Aug 2004 05:08:52 +0000 (GMT)
Received: from ylpvm15.prodigy.net (ylpvm15-ext.prodigy.net [207.115.57.46])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 2BA6A43D31
	for <questions@freebsd.org>; Wed, 18 Aug 2004 05:08:52 +0000 (GMT)
	(envelope-from kris@obsecurity.org)
Received: from obsecurity.dyndns.org
	(adsl-67-115-74-195.dsl.lsan03.pacbell.net [67.115.74.195])
	i7I58rEU010068;	Wed, 18 Aug 2004 01:08:53 -0400
Received: by obsecurity.dyndns.org (Postfix, from userid 1000)
	id 4A3D4513CF; Tue, 17 Aug 2004 22:08:50 -0700 (PDT)
Date: Tue, 17 Aug 2004 22:08:50 -0700
From: Kris Kennaway <kris@obsecurity.org>
To: Dennis George <easyeinfo@yahoo.com>
Message-ID: <20040818050850.GA435@xor.obsecurity.org>
References: <20040818041406.61362.qmail@web53906.mail.yahoo.com>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="UugvWAfsgieZRqgk"
Content-Disposition: inline
In-Reply-To: <20040818041406.61362.qmail@web53906.mail.yahoo.com>
User-Agent: Mutt/1.4.2.1i
cc: questions@freebsd.org
Subject: Re: PROCFS
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 18 Aug 2004 05:08:52 -0000


--UugvWAfsgieZRqgk
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Tue, Aug 17, 2004 at 09:14:06PM -0700, Dennis George wrote:
> Hi all,
> =20
> Can I disable PROCFS (through kernel configuration[sysctl/GENERIC] ) in f=
reeBSD....

Yes.  It's clear from the GENERIC config how to do this (remove the entry)).

>  If yes then what will the effect of this ???
> =20
> I mean to say that, do we really need the PROCFS ?

No, unless you run the one or two applications that require it.

>  If I disable it will I get any improvement in system performance in term=
s of speed ?

No.  It is better for security on a multi-user system though since
procfs has had a lot of security vulnerabilities over time, so there
may be more.

Kris


--UugvWAfsgieZRqgk
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (FreeBSD)

iD8DBQFBIuRhWry0BWjoQKURAm6TAJ0eivkk7StHVFzHrRVGSreTEZx6twCfbbZT
LpXMEIFT36ekKNnD3kKKFnM=
=bGd/
-----END PGP SIGNATURE-----

--UugvWAfsgieZRqgk--