10.0-BETA4 bsdinstall zfs encryption broken

Ben Morrow ben at morrow.me.uk
Wed Dec 4 20:21:29 UTC 2013


Quoth Devin Teske <dteske at freebsd.org>:
> 
> The procedure I use is to take the existing ISO and...
> 
> 1. use mdconfig to access it
> 2. use mount_cd9660 to mount it
> 3. use rsync to copy the contents to a local dir

It's more secure to use tar for these three steps. Filesystems generally
aren't hardened against malicious input.

Ben



More information about the freebsd-stable mailing list