From owner-freebsd-stable@FreeBSD.ORG  Fri Nov  2 17:27:17 2012
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
 by hub.freebsd.org (Postfix) with ESMTP id 7B6A7D48
 for <freebsd-stable@freebsd.org>; Fri,  2 Nov 2012 17:27:17 +0000 (UTC)
 (envelope-from adams-freebsd@ateamsystems.com)
Received: from fss.sandiego.ateamservers.com (fss.sandiego.ateamservers.com
 [69.55.229.149])
 by mx1.freebsd.org (Postfix) with ESMTP id 451348FC0A
 for <freebsd-stable@freebsd.org>; Fri,  2 Nov 2012 17:27:16 +0000 (UTC)
Received: from [192.168.15.220] (gw.digitalspark.net [118.175.84.92])
 (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits))
 (No client certificate requested)
 by fss.sandiego.ateamservers.com (Postfix) with ESMTPSA id 64EBDB9F24;
 Fri,  2 Nov 2012 13:27:15 -0400 (EDT)
Message-ID: <50940276.5030306@ateamsystems.com>
Date: Sat, 03 Nov 2012 00:27:18 +0700
From: Adam Strohl <adams-freebsd@ateamsystems.com>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64;
 rv:16.0) Gecko/20121010 Thunderbird/16.0.1
MIME-Version: 1.0
To: Mike Jakubik <mike.jakubik@intertainservices.com>
Subject: Re: SU+J on 9.1-RC2 ISO
References: <5093F934.7050306@ose.nl> <5093FD3D.3080201@ateamsystems.com>
 <1351876381.2657.1.camel@mjakubik.localdomain>
In-Reply-To: <1351876381.2657.1.camel@mjakubik.localdomain>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: Bas Smeelen <b.smeelen@ose.nl>, freebsd-stable@freebsd.org
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-stable>,
 <mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
 <mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 02 Nov 2012 17:27:17 -0000

On 11/3/2012 0:13, Mike Jakubik wrote:
> You can disable SU+J after installing, though it would be nice if the
> installer gave you a choice.

This assumes that you know about this flaw, which most people do not.

I didn't until I discovered it by panic-ing a perfectly fine running 
server.  Getting burned by a known bug like this shouldn't be "SOP" for 
users of FreeBSD.

If anything it should be turned off by default, and people can turn it 
on if they want given the landmine it plants.  If they know how to turn 
it on they're much more likely to be aware of the issue.


-- 
Adam Strohl
http://www.ateamsystems.com/