21.08.2019 3:12, FreeBSD Security Advisories wrote:

[skip]

> IV.  Workaround
> 
> No workaround is available.  Custom kernels without "device sound"
> are not vulnerable.

Is it true that there is no way to disable vulnerable and unneeded device driver
built in GENERIC other that through rebuilding the kernel?

I remember that pre-4.x versions of FreeBSD had visual VGA-based pre-boot 
configurator
allowing to disable any compiled-in device driver. Don't device.hints(5) or 
loader(8) have means to do so?

These days GENERIC have LOTS of drivers and it's convenient but unsafe.
_______________________________________________
freebsd-security@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscr...@freebsd.org"

Reply via email to