How about putting bpf functionality into install-kernel, but not into the GENERIC kernel?
If the install required the use of dhcp, sysinstall should yell about having to rebuild the kernel with bpf-device in. On the other hand, the security-concerned ISPs and others can rebuild their kernels to remove the bpf (they probably rebuild them anyway for other reasons, or should do that anyway). -mi To Unsubscribe: send mail to majord...@freebsd.org with "unsubscribe freebsd-current" in the body of the message