Date: Wed, 03 Feb 1999 10:32:05 -0800 (PST) From: Chris Piazza <cpiazza@home.net> To: Nate Williams <nate@mt.sri.com> Cc: security@FreeBSD.ORG, woodford@cc181716-a.hwrd1.md.home.com, "Jonathan M. Bresler" <jmb@FreeBSD.ORG>, "Jordan K. Hubbard" <jkh@zippy.cdrom.com> Subject: Re: tcpdump Message-ID: <XFMail.990203103205.cpiazza@home.net> In-Reply-To: <199902031717.KAA29988@mt.sri.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On 03-Feb-99 Nate Williams wrote: >> OK, time to raise this topic again. What to people think about >> enabling bpfilter by default in GENERIC? >> >> And before everyone screams "That would not be BSD!" let me just >> note that NetBSD and probably OpenBSD (haven't looked) already do >> this. > > I doubt OpenBSD does, since it's a security hole waiting to happen. > > > Nate > http://www.openbsd.org/cgi-bin/cvsweb/src/sys/conf/GENERIC?rev=1.41 (referenced by all architectures - ) which includes: pseudo-device bpfilter 8 # packet filter -- Chris Piazza Abbotsford, BC, Canada cpiazza@home.net finger norn@norn.ca.eu.org for PGP key To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?XFMail.990203103205.cpiazza>