Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 30 Jul 1999 12:46:19 -0700
From:      "Jordan K. Hubbard" <jkh@zippy.cdrom.com>
To:        hackers@freebsd.org
Subject:   So, back on the topic of enabling bpf in GENERIC...
Message-ID:  <8442.933363979@zippy.cdrom.com>

next in thread | raw e-mail | index | archive | help
We got off onto a big tangent about switches and vlans and stuff and I
learned a number of interesting things, don't get me wrong, but we
still haven't established any consensus on the trade-offs of enabling
bpf.  This wasn't meant to be a hypothetical discussion, I'm truly
trying to measure the trade-off between enabling bpf and (by some
fraction) opening things up to easier attack by sniffers in a
root-compromise situation vs not having DHCP work properly at all
after installation.

This is a clear security vs functionality issue and I need to get a
good feel for which "cause" is ascendent here in knowing which way to
jump on the matter.  Can we now hear the closing arguments from the
pro and con folks?

Thanks,

- Jordan


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?8442.933363979>