Re: CVS commit: src/sys

[christos%zoulas.com@localhost (Christos Zoulas)]

On Oct 3,  7:03pm, max%m00nbsd.net@localhost (Maxime Villard) wrote:
-- Subject: Re: CVS commit: src/sys

| What about you both cut the drama and the bullshit right here. What has been
| said already repeatedly, again, and again, is that choosing one side over the
| other just does not work. There is no "most secure", there is no "most usable".
| There is the *middle* of it; some security with features that are still
| compiled but not accessible by unpriv user by default, some usability with a
| way to enable the feature that requires the least effort possible.


How about the most usable is what we have now, and the most secure we can
get via a sysctl? Or the other way around? We do need a decision on where
we are heading though, because we keep disabling features piecemeal in the
name of security.

christos