Date: Thu, 26 Apr 2001 09:37:57 +1000 (EST) From: Bruce Evans <bde@zeta.org.au> To: Robert Watson <rwatson@FreeBSD.org> Cc: Warner Losh <imp@harmony.village.org>, cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/sys/conf Makefile.alpha Makefile.i386 Makefile.ia64 Makefile.pc98 Message-ID: <Pine.BSF.4.21.0104260933390.27945-100000@besplex.bde.org> In-Reply-To: <Pine.NEB.3.96L.1010425160211.40560A-100000@fledge.watson.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 25 Apr 2001, Robert Watson wrote: > On Wed, 25 Apr 2001, Warner Losh wrote: > > > In message <Pine.NEB.3.96L.1010425101646.34527A-100000@fledge.watson.org> Robert Watson writes: > > : Better yet, disable the setting of flags. :-) > > > > I'd love to do that. Would people support me? Yes. It should at least be possible to cancel them in a uniform way. bsd.lib.mk, bsd.prog.mk and kmod.mk let you kill them using INSTALLFLAGS_EDIT, but they are hard-coded in /sys/conf/Makefile.*. > It seems to come up every now and then. Frankly, I'd like to see them > disabled by default, as they break install onto a variety of non-FFS file > systems, in jail(), and cause a lot of POLA. And they offer no real > benefit in the default install (arguably you might be able to configure > securelevels to do what they claim, but it will require a lot more thank > sprinkling noschg on a few kernel modules). obrien just changed the default for modules, so kmod.mk is no longer uniform :-). Bruce To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0104260933390.27945-100000>