cvs commit: src/sys/alpha/alpha mem.c src/sys/alpha/confmem.c memdev.h src/sys/conf NOTES files files.alpha files.amd64 ...

[Matteo Riondato]

Dag-Erling Smørgrav wrote:
> Mark Murray <markm at FreeBSD.org> writes:
> >   Log:
> >   Break out the MI part of the /dev/[k]mem and /dev/io drivers into
> >   their own directory and module, leaving the MD parts in the MD
> >   area (the MD parts _are_ part of the modules). /dev/mem and /dev/io
> >   are now loadable modules, thus taking us one step further towards
> >   a kernel created entirely out of modules. Of course, there is nothing
> >   preventing the kernel from having these statically compiled.
> 
> The other good news of course is that it is now possible to build a
> kernel that does not have /dev/mem and /dev/io - that's pretty
> significant from a security point of view.  Thanks!

Can you please explain why it's signficant?
Thanks.
-- 
Rionda aka Matteo Riondato
GUFI Staff Member (http://www.gufi.org)
BSD-FAQ-it Main Developer (http://www.gufi.org/~rionda)
FreeSBIE BugMeister (http://www.freesbie.org)
GPG key at: http://www.riondabsd.net/riondagpg.asc
Sent from: kaiser.sig11.org running FreeBSD-5.2-CURRENT
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: Questa parte del messaggio =?ISO-8859-1?Q?=E8?= firmata
Url : http://lists.freebsd.org/pipermail/cvs-all/attachments/20040802/e84c49fc/attachment.bin