FreeBSD Security Advisory FreeBSD-SA-14:07.devfs

[Xin Li]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 04/30/14 11:51, Corey Smith wrote:
>> It would be interesting to find out if we could teach net-snmpd
>> to use alternative methods to access data it needs
> 
> It is not necessary if you build net-mgmt/net-snmp with the
> UNPRIVILEGED knob set.

Will there be any lost functionality with that knob set?  (I don't use
net-snmp myself)  If there is no lost functional, I think it's
sensible to hard wire that option -- giving access to /dev/[k]mem
makes me feel quite nervous, especially for network facing daemons...

Cheers,
- -- 
Xin LI <delphij at delphij.net>    https://www.delphij.net/
FreeBSD - The Power to Serve!           Live free or die
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (FreeBSD)
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=ySJm
-----END PGP SIGNATURE-----