Re: CVS commit: src/sys

[Manuel Bouyer <bouyer%antioche.eu.org@localhost>]

On Tue, Oct 03, 2017 at 07:53:41PM +0200, Kamil Rytarowski wrote:
> For a server or a product I wouldn't want to run such executables and I
> would use SECURE or HIGHLY-SECURE mode.

This is why for servers I rebuild a kernel with only what I need
(and in term of hardware drivers too).
And of course there's no MODULAR here.

Much better than disabling random features which may, or may not, be the
next security issue.

-- 
Manuel Bouyer <bouyer%antioche.eu.org@localhost>
     NetBSD: 26 ans d'experience feront toujours la difference
--