Re: Someone using COMPAT_SVR4(_32) ?

[Eduardo Horvath <eeh%NetBSD.org@localhost>]

On Mon, 31 Jul 2017, Maxime Villard wrote:

> Hi,
> Recently, a number of security issues were found in COMPAT_SVR4 and
> COMPAT_SVR4_32. Due to lack of maintenance and interest from developers, these
> options are not reliable, and undermine the overall code quality of the
> system.
> 
> I would like to know whether someone here actively uses COMPAT_SVR4 and/or
> COMPAT_SVR4_32, and if this use case justifies keeping these options in the
> system. I plan to remove both of them, but I'd like some feedback.
> 
> Note that these options are now disabled by default.

Don't get rid of COMPAT_SVR4*.  It's used to run Solaris binaries.  
If you need to run a Solaris binary then trying to reimplement COMPAT_SVR4 
from scratch is a huge pain compared to just fixing some breakage.

If it isn't enabled then it isn't a security hole.

Eduardo