From owner-cvs-all Wed Apr 25 16:39: 9 2001 Delivered-To: cvs-all@freebsd.org Received: from mailman.zeta.org.au (mailman.zeta.org.au [203.26.10.16]) by hub.freebsd.org (Postfix) with ESMTP id 7F03937B423; Wed, 25 Apr 2001 16:39:02 -0700 (PDT) (envelope-from bde@zeta.org.au) Received: from bde.zeta.org.au (bde.zeta.org.au [203.2.228.102]) by mailman.zeta.org.au (8.9.3/8.8.7) with ESMTP id JAA28991; Thu, 26 Apr 2001 09:38:59 +1000 Date: Thu, 26 Apr 2001 09:37:57 +1000 (EST) From: Bruce Evans X-Sender: bde@besplex.bde.org To: Robert Watson Cc: Warner Losh , cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/sys/conf Makefile.alpha Makefile.i386 Makefile.ia64 Makefile.pc98 In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Wed, 25 Apr 2001, Robert Watson wrote: > On Wed, 25 Apr 2001, Warner Losh wrote: > > > In message Robert Watson writes: > > : Better yet, disable the setting of flags. :-) > > > > I'd love to do that. Would people support me? Yes. It should at least be possible to cancel them in a uniform way. bsd.lib.mk, bsd.prog.mk and kmod.mk let you kill them using INSTALLFLAGS_EDIT, but they are hard-coded in /sys/conf/Makefile.*. > It seems to come up every now and then. Frankly, I'd like to see them > disabled by default, as they break install onto a variety of non-FFS file > systems, in jail(), and cause a lot of POLA. And they offer no real > benefit in the default install (arguably you might be able to configure > securelevels to do what they claim, but it will require a lot more thank > sprinkling noschg on a few kernel modules). obrien just changed the default for modules, so kmod.mk is no longer uniform :-). Bruce To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message