On Fri, 23 Dec 2011 15:54:35 +0100 Tom Gundersen wrote:
[...] I have to disable 3d support on some machines,
due to the gaping security hole that graphics cards require [...]
OT:
Would you care to elaborate on this? What security hole do you have in mind?
Cheers,
Tom
http://marc.info/?l=openbsd-misc&m=114233317926101
And equivelent on Linux
http://forums.grsecurity.net/viewtopic.php?f=3&t=47
You can use framebuffer mode or the nouveau driver instead of the nvidia binary and still run X with RAWIO access disabled but with limited acceleration.