Sean Eric Fagan writes :
> 
> 1.  /dev/bpf0 is mode 400, root.wheel -- to read it, you need to break root.
> 2.  If you can break root, you can rebuild a kernel with BPF *anyway*.

Not quite - bpf is potentially dangerous where a sysadmin is inexperienced.
On a system with a generic kernel and no source on it, it may be fairly
difficult to get a kernel with bpf onto the system.  Where there is an
experienced admin, this becomes less of an issue.

I am not trying to stop DHCP being added to the tree.  It may even be
necessary to use bpf initially, but there must be a more elegant way -
having a quick look around - it would be a good idea to look at the
code which already exists in libstand (/usr/src/lib/libstand/bootp.c).
I haven't had an exhaustive look through the code, but this should
give the necessary material to work out another way of doing things.

Geoff.

-- 
Geoff Rehmet,
The Internet Solution
geo...@is.co.za; ge...@rucus.ru.ac.za; c...@freebsd.org
tel: +27-83-292-5800

To Unsubscribe: send mail to majord...@freebsd.org
with "unsubscribe freebsd-current" in the body of the message

Reply via email to