Date: Tue, 17 Aug 2004 22:08:50 -0700 From: Kris Kennaway <kris@obsecurity.org> To: Dennis George <easyeinfo@yahoo.com> Cc: questions@freebsd.org Subject: Re: PROCFS Message-ID: <20040818050850.GA435@xor.obsecurity.org> In-Reply-To: <20040818041406.61362.qmail@web53906.mail.yahoo.com> References: <20040818041406.61362.qmail@web53906.mail.yahoo.com>
next in thread | previous in thread | raw e-mail | index | archive | help
--UugvWAfsgieZRqgk Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Aug 17, 2004 at 09:14:06PM -0700, Dennis George wrote: > Hi all, > =20 > Can I disable PROCFS (through kernel configuration[sysctl/GENERIC] ) in f= reeBSD.... Yes. It's clear from the GENERIC config how to do this (remove the entry)). > If yes then what will the effect of this ??? > =20 > I mean to say that, do we really need the PROCFS ? No, unless you run the one or two applications that require it. > If I disable it will I get any improvement in system performance in term= s of speed ? No. It is better for security on a multi-user system though since procfs has had a lot of security vulnerabilities over time, so there may be more. Kris --UugvWAfsgieZRqgk Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (FreeBSD) iD8DBQFBIuRhWry0BWjoQKURAm6TAJ0eivkk7StHVFzHrRVGSreTEZx6twCfbbZT LpXMEIFT36ekKNnD3kKKFnM= =bGd/ -----END PGP SIGNATURE----- --UugvWAfsgieZRqgk--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040818050850.GA435>