Re: FreeBSD Security Advisory FreeBSD-SA-14:07.devfs
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
On 04/30/14 11:51, Corey Smith wrote:
>> It would be interesting to find out if we could teach net-snmpd
>> to use alternative methods to access data it needs
>
> It is not necessary if you build net-mgmt/net-snmp with the
> UNPRIVILEGED knob set.
Will there be any lost functionality with that knob set? (I don't use
net-snmp myself) If there is no lost functional, I think it's
sensible to hard wire that option -- giving access to /dev/[k]mem
makes me feel quite nervous, especially for network facing daemons...
Cheers,
- --
Xin LI <delphij@delphij.net> https://www.delphij.net/
FreeBSD - The Power to Serve! Live free or die
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (FreeBSD)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=ySJm
-----END PGP SIGNATURE-----
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
討論串 (同標題文章)
完整討論串 (本文為第 6 之 10 篇)：