[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
Re: Adding a simple editor to the base system
In article <20090214204221.GG26658%frohike.homeunix.org@localhost>,
Peter Bex <Peter.Bex%xs4all.nl@localhost> wrote:
>On Sat, Feb 14, 2009 at 11:13:18AM -0500, Thor Lancelot Simon wrote:
>> So it's a useful feature, but it's not safe default behavior, because
>> it violates people's heretofore reasonable expectations about how Unix
>> works in a way that can let them carelessly get themselves in trouble.
>Absolutely agreed. However, after a discussion about this with ASau in
>#netbsd, we agreed that recompiling the kernel is too big of a hassle
>to make this work.
>In essence, I think this option is similar to vfs.generic.usermount in
>that it's a security risk, but if you really want it you can turn it on.
>Why not make this option into a sysctl, that defaults to off?
>This way, people who really need it (and understand all the implications)
>could simply flip a switch without going through the process of
>recompiling their kernel. Then the documentation for this switch could
>come with a big fat warning stating why it's dangerous.
That sounds fine to me.
Main Index |
Thread Index |