Date: Wed, 30 Apr 2014 11:58:38 -0700 From: Xin Li <delphij@delphij.net> To: Corey Smith <corsmith@gmail.com>, freebsd-security@freebsd.org, matthew@freebsd.org, d@delphij.net Subject: Re: FreeBSD Security Advisory FreeBSD-SA-14:07.devfs Message-ID: <536147DE.5030703@delphij.net> In-Reply-To: <CAHQQXOM_OBzsiLLxtUTFY1KQNAftz-GRQv3tV6zD3iENt9%2Bjcg@mail.gmail.com> References: <CAHQQXOM_OBzsiLLxtUTFY1KQNAftz-GRQv3tV6zD3iENt9%2Bjcg@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 04/30/14 11:51, Corey Smith wrote: >> It would be interesting to find out if we could teach net-snmpd >> to use alternative methods to access data it needs > > It is not necessary if you build net-mgmt/net-snmp with the > UNPRIVILEGED knob set. Will there be any lost functionality with that knob set? (I don't use net-snmp myself) If there is no lost functional, I think it's sensible to hard wire that option -- giving access to /dev/[k]mem makes me feel quite nervous, especially for network facing daemons... Cheers, - -- Xin LI <delphij@delphij.net> https://www.delphij.net/ FreeBSD - The Power to Serve! Live free or die -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (FreeBSD) iQIcBAEBCgAGBQJTYUfeAAoJEJW2GBstM+ns25oP/0zGN2rtZI16ilY/yE+vlbsm Is9j+DfbPKV99cffJHxTc6DCQjBTYpAEtr20LaWXBx3O4KpVuX+KZP5IMH0Rl1Et /2+o+MQHYhZ9j5osMofNZeqIesauSLmPhNzyyU0Q1F1yajonlHXD7oDNC88Hqyhj HRz+beEboz+B3tQEm+vNTIA88xQCuQOS32rjqGQ/RsmmY+vMS9x61OJAKA+bMtvq framYJvsZMdZQFzEpvb0VZvI/ZA5T7HtoXBdAJDsFtHn2E99iqcUgrpcDa1YtE5L 2VR+9SJgiKsLH09+L3DFB4hOqTir0X7EGdSZM5xiRCvVaReBcgESgHe9I4Un+xzC azbCzpSTAvM/u97DZdBnMHOCqeviHquwNgpgHy8H3u9Vz+I5nAQSNVFsp4SohgPk g6a4Bp4nvpx+H7V86+i+jjxvowtjV033oglAgNwjPRxpw25/vamA8dqbQT9zKW9Z fNx5DyEdIwq/aGHZSe4ybBTrZ3f6YZat7SUOfyA5zfICpte4sSf7+0puGLPha6VM RRWnnQtQojpmnBq3ycWk9pUFcyNN7RVDE9FFvD83vA2HCqV4iGkXeyr/Tk7fH81t Df4qzYIPXWF2Arm7nwvTFYmoj+GnStco8k+OqukNviPxO3lKQTVWAilvyY2/nfQK GOIXoW2YQLuViQur4pvP =ySJm -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?536147DE.5030703>