[src/netbsd-8]: src/sys/arch/i386/conf Pull up following revision(s) (request...

[snj <snj%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/7c2dcafaf8dd
branches:  netbsd-8
changeset: 850954:7c2dcafaf8dd
user:      snj <snj%NetBSD.org@localhost>
date:      Fri Aug 25 05:53:12 2017 +0000

description:
Pull up following revision(s) (requested by maxv in ticket #230):
        sys/arch/i386/conf/GENERIC: revision 1.1158
Disable vm86 by default. The use case is limited, and the potential for
damage is too high.
This code is fragile, and relies on a certain number of assumptions, some
of which are not be totally true. For example, it relies on the fact that
a 16bit process cannot perform a syscall, but verily it can. The slighest
confusion in the trap frame can lead to ring0 exploits. Also, I'm not
convinced that it interacts well with the compatibility layers.

diffstat:

 sys/arch/i386/conf/GENERIC |  6 +++---
 1 files changed, 3 insertions(+), 3 deletions(-)

diffs (24 lines):

diff -r a8c873654ef3 -r 7c2dcafaf8dd sys/arch/i386/conf/GENERIC
--- a/sys/arch/i386/conf/GENERIC        Fri Aug 25 05:50:00 2017 +0000
+++ b/sys/arch/i386/conf/GENERIC        Fri Aug 25 05:53:12 2017 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: GENERIC,v 1.1156.2.2 2017/08/01 23:18:30 snj Exp $
+# $NetBSD: GENERIC,v 1.1156.2.3 2017/08/25 05:53:12 snj Exp $
 #
 # GENERIC machine description file
 #
@@ -22,12 +22,12 @@
 
 options        INCLUDE_CONFIG_FILE     # embed config file in kernel binary
 
-#ident         "GENERIC-$Revision: 1.1156.2.2 $"
+#ident         "GENERIC-$Revision: 1.1156.2.3 $"
 
 maxusers       64              # estimated number of users
 
 # CPU-related options.
-options        VM86            # virtual 8086 emulation
+#options       VM86            # virtual 8086 emulation
 options        USER_LDT        # user-settable LDT; used by WINE
 #options       PAE             # PAE mode (36 bits physical addressing)