• 1 Post
  • 119 Comments
Joined 3 years ago
cake
Cake day: June 22nd, 2023

help-circle





  • ozymandias117@lemmy.worldtoLinux@lemmy.mlWhy Linux?
    link
    fedilink
    English
    arrow-up
    6
    ·
    edit-2
    2 months ago

    BSDs are also monolithic kernels, just like Linux, macOS, and Windows NT

    FreeBSD has been trying to make it easier to run as a desktop OS by supporting the Linux APIs so they can use the WiFi and Graphics drivers from Linux

    OpenBSD handles security by supporting fewer features. E.g. they do not support Bluetooth as it’s an insecure protocol, and they disabled SMT due to the hardware bugs in AMD/Intel/ARM - so they are more secure, but slower












  • Check uname -r

    If you’re on 6.19.12 or newer (7.0.1 if they’ve already bumped to 7) you’re definitely safe

    For others, it looks fixed in 6.18.22 6.12.85 6.6.137 6.1.170 5.15.204

    If you don’t have a safe kernel, A better solution referenced below than a module blacklist is to set initcall_blacklist=algif_aead_init in your kernel boot parameters. There is not a generic way to do this across distros, so you will need to look it up for your case

    ~~If you don’t have the updated kernel, you can echo "install algif_aead /bin/false" > /etc/modprobe.d/disable-algif.conf and reboot.

    That ensures the buggy module cannot be loaded until you have an updated kernel~~