diff options
author | Kyle Evans <kevans@FreeBSD.org> | 2018-07-12 02:51:50 +0000 |
---|---|---|
committer | Kyle Evans <kevans@FreeBSD.org> | 2018-07-12 02:51:50 +0000 |
commit | 44314c3509acfd34db0495acf688a156b2b92c96 (patch) | |
tree | 606e5ddfd9f230c23fa03a9735b7014856e7f183 /UPDATING | |
parent | ac268038ebbb426c14cddcb8322075114e72bd26 (diff) | |
download | src-test2-44314c3509acfd34db0495acf688a156b2b92c96.tar.gz src-test2-44314c3509acfd34db0495acf688a156b2b92c96.zip |
kern_environment: Give the static environment a chance to disable MD env
This variable has been given the name "loader_env.disabled" as it's the
primary way most people will have an MD environment. This restores the
previously-default behavior of ignoring the loader(8) environment, which may
be useful for vendor distributions or other scenarios where inheriting the
loader environment may be considered a security issue or potentially
breaking of a more locked-down environment.
As the change to config(5) indicates, disabling the loader environment
should not be a choice made lightly since it may provide ACPI hints and
other useful things that the system can rely on to boot.
An UPDATING entry has been added to mention an upgrade path for those that
may have relied on the previous behavior.
Discussed with: bde
Relnotes: yes (maybe)
Notes
Notes:
svn path=/head/; revision=336217
Diffstat (limited to 'UPDATING')
-rw-r--r-- | UPDATING | 7 |
1 files changed, 7 insertions, 0 deletions
@@ -31,6 +31,13 @@ NOTE TO PEOPLE WHO THINK THAT FreeBSD 12.x IS SLOW: disable the most expensive debugging functionality run "ln -s 'abort:false,junk:false' /etc/malloc.conf".) +20180711: + The static environment setup in kernel configs is no longer mutually + exclusive with the loader(8) environment by default. In order to + restore the previous default behavior of disabling the loader(8) + environment if a static environment is present, you must specify + loader_env.disabled=1 in the static environment. + 20180705: The ABI of syscalls used by management tools like sockstat and netstat has been broken to allow 32-bit binaries to work on |