From owner-freebsd-stable@FreeBSD.ORG  Thu Apr  7 21:28:22 2005
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 8518416A4CE
	for <stable@freebsd.org>; Thu,  7 Apr 2005 21:28:22 +0000 (GMT)
Received: from obsecurity.dyndns.org
	(CPE0050040655c8-CM00111ae02aac.cpe.net.cable.rogers.com [69.194.102.111])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 5272F43D45
	for <stable@freebsd.org>; Thu,  7 Apr 2005 21:28:22 +0000 (GMT)
	(envelope-from kris@obsecurity.org)
Received: by obsecurity.dyndns.org (Postfix, from userid 1000)
	id 6DF4F514D6; Thu,  7 Apr 2005 14:28:21 -0700 (PDT)
Date: Thu, 7 Apr 2005 14:28:21 -0700
From: Kris Kennaway <kris@obsecurity.org>
To: bob@a1poweruser.com
Message-ID: <20050407212821.GA49406@xor.obsecurity.org>
References: <20050407204747.GP64927@dan.emsphone.com>
	<MIEPLLIBMLEEABPDBIEGEELOHDAA.bob@a1poweruser.com>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="YZ5djTAD1cGYuMQK"
Content-Disposition: inline
In-Reply-To: <MIEPLLIBMLEEABPDBIEGEELOHDAA.bob@a1poweruser.com>
User-Agent: Mutt/1.4.2.1i
cc: stable@freebsd.org
cc: Dan Nelson <dnelson@allantgroup.com>
Subject: Re: nfsiod tasks started in error
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Production branch of FreeBSD source code
	<freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 07 Apr 2005 21:28:22 -0000


--YZ5djTAD1cGYuMQK
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

On Thu, Apr 07, 2005 at 05:06:07PM -0400, bob@a1poweruser.com wrote:

> Plan and simple. It's a security hole.

OK, you've changed your mind; last time you were claiming it was a
waste of resources.

> If no nfs is selected in
> sysinstall then there should not be any nfs stuff started at all.

It's in the default kernel, and killing the kernel nfsiod threads will
not disable NFS support.

If you think NFS support is a security hole, remove it from your
kernel and recompile.

Kris

--YZ5djTAD1cGYuMQK
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (FreeBSD)

iD8DBQFCVaX1Wry0BWjoQKURAgTrAKD4GKgWXJWzG5zTydbz3VAdbdh30gCg+6n7
vZrGXIDLJpzu6bHaO151Lgo=
=o2Px
-----END PGP SIGNATURE-----

--YZ5djTAD1cGYuMQK--