From owner-freebsd-questions  Fri Nov 16  9:23: 6 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from obsecurity.dyndns.org (adsl-63-207-60-80.dsl.lsan03.pacbell.net [63.207.60.80])
	by hub.freebsd.org (Postfix) with ESMTP id E1E2237B416
	for <questions@FreeBSD.ORG>; Fri, 16 Nov 2001 09:23:02 -0800 (PST)
Received: by obsecurity.dyndns.org (Postfix, from userid 1000)
	id 6968A66D0C; Fri, 16 Nov 2001 09:23:02 -0800 (PST)
Date: Fri, 16 Nov 2001 09:23:02 -0800
From: Kris Kennaway <kris@obsecurity.org>
To: Nils Holland <nils@tisys.org>
Cc: Holtor <holtor@yahoo.com>, questions@FreeBSD.ORG
Subject: Re: PROCFS
Message-ID: <20011116092302.A79857@xor.obsecurity.org>
References: <20011116130058.32348.qmail@web11601.mail.yahoo.com> <20011116142640.W2605-100000@jodie.ncptiddische.net>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
	protocol="application/pgp-signature"; boundary="envbJBWh7q8WU6mo"
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <20011116142640.W2605-100000@jodie.ncptiddische.net>; from nils@tisys.org on Fri, Nov 16, 2001 at 02:27:37PM +0100
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG


--envbJBWh7q8WU6mo
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Fri, Nov 16, 2001 at 02:27:37PM +0100, Nils Holland wrote:
> On Fri, 16 Nov 2001, Holtor wrote:
>=20
> > Hello!
> >
> > Is it safe to remove PROCFS in a custom kernel? It is
> > in all kernels by default but from what I notice it
> > does absolutely nothing! So it safe to remove?
>=20
> Absolutely nothing? Well, it's required for all the stuff you can read out
> in /proc. Some vital software uses the information found there, and it is
> probably one of the things you really should not remove from your kernel.

Actually, almost nothing in the base system relies on it.  Given the
apparently eternal security risks from procfs it's very sensible not
to use it on a system with untrusted users.

Kris

--envbJBWh7q8WU6mo
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE79Ut1Wry0BWjoQKURApQFAKDMHPnZUvt1kHH4FyVv1j/vXp1vqACdGm0i
rfUpKfLi+n1shg+sniJcNDo=
=a6za
-----END PGP SIGNATURE-----

--envbJBWh7q8WU6mo--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message