svn commit: r346263 - head/contrib/tcpdump

Conrad Meyer cem at freebsd.org
Tue Apr 16 15:38:05 UTC 2019


On Tue, Apr 16, 2019 at 6:20 AM Shawn Webb <shawn.webb at hardenedbsd.org> wrote:
> Is there any documentation anywhere telling users that Capsicum
> support will be disabled under certain circumstances?

Hi Shawn,

I don't think documenting that makes much sense in general.  It would
be extremely burdensome to fully document and quickly become
desynchronized from the code.  It's comparable to OpenBSD pledging
differently in different paths of programs.

To me, "for now," suggests that this is perhaps a temporary workaround
and maybe we can do something better in the future.

Take care,
Conrad

P.S., When do you plan to update your Easy Feature Comparison page to
reflect that FreeBSD has the same procfs and "boot hardening" as HBSD?


More information about the svn-src-all mailing list