From owner-freebsd-arch@FreeBSD.ORG Thu Jan 3 10:52:06 2008 Return-Path: Delivered-To: arch@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 5571116A417 for ; Thu, 3 Jan 2008 10:52:06 +0000 (UTC) (envelope-from qpadla@gmail.com) Received: from mu-out-0910.google.com (mu-out-0910.google.com [209.85.134.191]) by mx1.freebsd.org (Postfix) with ESMTP id 9A84213C442 for ; Thu, 3 Jan 2008 10:52:05 +0000 (UTC) (envelope-from qpadla@gmail.com) Received: by mu-out-0910.google.com with SMTP id i10so4321348mue.3 for ; Thu, 03 Jan 2008 02:52:04 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:from:reply-to:to:subject:date:user-agent:references:in-reply-to:cc:mime-version:content-type:content-transfer-encoding:content-disposition:message-id; bh=C/6RPbT/VzE53/tVYZawp0rglHZfeG/ieN5ZIsQYo4s=; b=MpkBUzNrT+z0fLazeyv5X6bJ4woLf18eGZQqeH84n/EOUT4DDQ9Ados/GVyoeJEt8l18US/yPvj8EJTBmwGbKjvWcP5jThul7jZy/XLq0V5Q8Wfy3KXwmLDSp9ZV6umJcDJ16Sdl+5zApu4nWFRjTiArcmqM3SdkM5+Y8HvkRTM= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=from:reply-to:to:subject:date:user-agent:references:in-reply-to:cc:mime-version:content-type:content-transfer-encoding:content-disposition:message-id; b=bBN7sa4Npew67o9WBeW9dgmIBr86uPp2lPzkms/z98Us3r/1zd7vLa11pqMDnBeUp+/l8zwb0ALhrU96K5l4R84j0NtkqxF+Xz/1mnyFutsYyokJVFySGcWzQ8qMmqrwX9HPe2+z7HUACE/mtZhOTCxTkYK+hqvtplS6aqrDGL8= Received: by 10.78.190.10 with SMTP id n10mr17850619huf.37.1199357512921; Thu, 03 Jan 2008 02:51:52 -0800 (PST) Received: from orion ( [89.162.141.1]) by mx.google.com with ESMTPS id f3sm21288519nfh.15.2008.01.03.02.51.51 (version=TLSv1/SSLv3 cipher=OTHER); Thu, 03 Jan 2008 02:51:52 -0800 (PST) From: Nikolay Pavlov To: freebsd-security@freebsd.org Date: Thu, 3 Jan 2008 12:51:49 +0200 User-Agent: KMail/1.9.6 (enterprise 0.20070907.709405) References: <477277FF.30504@googlemail.com> <20071228200428.J6052@odysseus.silby.com> <477BFF43.6060003@googlemail.com> In-Reply-To: <477BFF43.6060003@googlemail.com> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200801031251.49378.qpadla@gmail.com> Cc: arch@freebsd.org Subject: Re: ProPolice/SSP in 7.0 X-BeenThere: freebsd-arch@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: qpadla@gmail.com List-Id: Discussion related to FreeBSD architecture List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Jan 2008 10:52:06 -0000 On Wednesday 02 January 2008 23:16:51 Gunther Mayer wrote: > Thanks everyone for answering my questions so far. > > Mike Silbersack wrote: > > It's too late to make that sort of change for FreeBSD 7.0, but I think > > that's a good goal for FreeBSD 8.0. > > > > Here's what I think you could do: > > > > 1. Verify that enabling SSP works properly. > > Ok, I will certainly do that once 7.0 is out and I can run it for a > while on our testing box. > > > 2. Convince Kris Kennaway to run his mysql benchmarks on a FreeBSD 8 > > system both with and without SSP to verify that there is no > > significant slowdown. > > Hmm, I guess Kris is not subscribed to -security? Maybe I'll have to > post in -questions then... But you can cc him directly. > > > 3. Get it enabled on FreeBSD 8 by default. > > 4. Request that the change be made to FreeBSD 7.1 or 7.2 after it has > > proven to not cause problems on FreeBSD 8. > > Ok, but what's the best way to go about that? Don't see that being > documented in the handbook. Do you suggest a post on -questions or a > send-pr or both? Since this change is related to whole the system the arch would be a better place. -- ====================================================================== - Best regards, Nikolay Pavlov. <<<----------------------------------- ======================================================================