Skip site navigation (1)Skip section navigation (2)
Date:      16 Jun 1999 10:06:16 +0200
From:      Dag-Erling Smorgrav <des@flood.ping.uio.no>
To:        Unknow User <kernel@tdnet.com.br>
Cc:        security@FreeBSD.ORG
Subject:   Re: some nice advice....
Message-ID:  <xzp7lp4efif.fsf@flood.ping.uio.no>
In-Reply-To: Unknow User's message of "Wed, 16 Jun 1999 00:53:11 -0300"
References:  <37671FA7.E3D87FB4@tdnet.com.br.>

next in thread | previous in thread | raw e-mail | index | archive | help
Unknow User <kernel@tdnet.com.br> writes:
> Do i really need to have bfp, i don't enjoy such device in my kernel,
> but there some security tools that don't run without it. Should i build
> a kernel with bfp enabled or give up using the tool!

Why don't you want BPF in your kernel? It is extremely useful, and has
a minimal impact on performance when it's not in use. As long as you
make sure the permissions on the device node are right (so regular
users can't gain access to BPF), it's not even a security risk.

DES
-- 
Dag-Erling Smorgrav - des@flood.ping.uio.no


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?xzp7lp4efif.fsf>