Change Details

This is not intended to be committed as-is and should be split into several pieces. For instance: - dtrace probes can be moved to sctp_kdtrace.c separately - rt_addrmsg eventhandler can be added separately - addition of the SCTP_SUPPORT option can be done separately My goal is to enable removal of SCTP from our GENERIC kernels: I believe there are relatively few users, and SCTP presents a relatively large attack surface. Consider that IPSEC has more users and is similarly not in GENERIC; one can set ipsec_enable="YES" in /etc/rc.conf and have it automatically be loaded.

This is not intended to be committed as-is and should be split into several pieces. For instance: - dtrace probes can be moved to sctp_kdtrace.c separately - rt_addrmsg eventhandler can be added separately - addition of the SCTP_SUPPORT option can be done separately There are some XXX comments that I plan to address. My goal is to enable removal of SCTP from our GENERIC kernels: I believe there are relatively few users, and SCTP presents a relatively large attack surface. Consider that IPSEC has more users and is similarly not in GENERIC; one can set ipsec_enable="YES" in /etc/rc.conf and have it automatically be loaded.

This is not intended to be committed as-is and should be split into several pieces. For instance: - dtrace probes can be moved to sctp_kdtrace.c separately - rt_addrmsg eventhandler can be added separately - addition of the SCTP_SUPPORT option can be done separately There are some XXX comments that I plan to address. My goal is to enable removal of SCTP from our GENERIC kernels: I believe there are relatively few users, and SCTP presents a relatively large attack surface. Consider that IPSEC has more users and is similarly not in GENERIC; one can set ipsec_enable="YES" in /etc/rc.conf and have it automatically be loaded.