From nobody Mon Apr 13 08:23:42 2026 X-Original-To: dev-commits-doc-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4fvL5w3pJhz6YYK2 for ; Mon, 13 Apr 2026 08:23:48 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R12" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4fvL5w2b83z4PjC for ; Mon, 13 Apr 2026 08:23:48 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1776068628; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=s54l/FdCPkZTky7fDN8928Q4Kj/8gje6v/or6g+tRN4=; b=QTYYFanN/ZybY7yDL04A8Zeax+qv2QRuD0SXBBN7YgEggVenGtefSHwiiNgbJfpZ38fGqP fhwRWlWCN66vPqmCRJJ2PDFijDlN36xjzIfiX59vjnWALE8v9zjB4Pi1E/zkHyQzXOAiRa 1Fi7P/8xpFOCDEZke0t5ZdczJQZQG9i4xzQ2FdhLmhAnuHpGuhF0GlhLPYXJ0ACbSEWR/A 5fMWe29RmIQ6RPHTkolEcifbvr3cyXrRbLya5FMflmfAsJSqWcpkYv9/yYFZIR5ps6kT86 XucEMsI6QP4tmhFx2juJuQKgWgEggQECCWVeVcr0BvikdCnynetCPoaSStktkA== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1776068628; a=rsa-sha256; cv=none; b=tkj7eGJtzHBRks7hPyetJv9qm+CzaqlwqTs6OqnkErjScyXxUlKXD187NDNC0K+DdvBTzO +F0U98luzMcTjkKtFafiI5wg/iI3OZQkJDtG1kPtGWw5qtwRsBqIKL2WbihxJmqj/ONGRQ xhbMqB/fiKZJck43EmX32HimfMUk6hz7ftpzbPBcAAP0efwZ/IWa4OpT4B3D2uS8lnhDl3 xEsfdQupj9ceg4MTbnXgKOYr/gztW9hjD5qw3z0Sg/bTLreVkj8CQEw9I2xgFazlfAxaMV GrUO4UrC0hcrTrLHrpvCYkgMNiMOhmIUNsUrt+2r8jO3n13pDX9GU8J5DGHnfw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1776068628; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=s54l/FdCPkZTky7fDN8928Q4Kj/8gje6v/or6g+tRN4=; b=KMuWLyP4cFkxoszV1S1KAUNYXW14+wd0yAQV+9em3jv64V6V7Ad+6kYVjbapvmAEJceN3P NWaMST3E1MMvOfJko1w5oRdt1Lmey2V/NVK3EitcPuV+wM3O6UCeOmyjwgSoXMDWWIsbgu 7Qz71/gYzEddxtsnwJ2tzBXd2JEPJ1s1vImuEHSA4ERscvLiUETJM0rngRy5MFkI+T4P48 t1rr96N7rVXTyvGkypXHQp/87eZtRVTHrFR/q/cr+kZC+gq6GYTjmNYsm6QXRSzPEbQ+Ma PRrGLQhoAs9lZSGD2U5DkZjnLCcbeTIr/QtUw+tYES2NSbC/dllrMxGRsLsBlg== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4fvL5w25ZNzw3V for ; Mon, 13 Apr 2026 08:23:48 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id 198fb by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Mon, 13 Apr 2026 08:23:42 +0000 To: doc-committers@FreeBSD.org, dev-commits-doc-all@FreeBSD.org Cc: Big Sneaky From: Sergio Carlavilla Delgado Subject: git: 8970ac5ea1 - main - Handbook-bsdinstall: Upgrade hardening options List-Id: Commit messages for all branches of the doc repository List-Archive: https://lists.freebsd.org/archives/dev-commits-doc-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-doc-all@freebsd.org Sender: owner-dev-commits-doc-all@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: carlavilla X-Git-Repository: doc X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 8970ac5ea149d1ae4e9b99d5974b5d3947c2af19 Auto-Submitted: auto-generated Date: Mon, 13 Apr 2026 08:23:42 +0000 Message-Id: <69dca80e.198fb.211e3b58@gitrepo.freebsd.org> The branch main has been updated by carlavilla: URL: https://cgit.FreeBSD.org/doc/commit/?id=8970ac5ea149d1ae4e9b99d5974b5d3947c2af19 commit 8970ac5ea149d1ae4e9b99d5974b5d3947c2af19 Author: Big Sneaky AuthorDate: 2026-04-13 08:22:48 +0000 Commit: Sergio Carlavilla Delgado CommitDate: 2026-04-13 08:22:48 +0000 Handbook-bsdinstall: Upgrade hardening options Reviewed by: carlavilla@, ziaee@ Pull Request: https://github.com/freebsd/freebsd-doc/pull/644 --- documentation/content/en/books/handbook/bsdinstall/_index.adoc | 2 -- 1 file changed, 2 deletions(-) diff --git a/documentation/content/en/books/handbook/bsdinstall/_index.adoc b/documentation/content/en/books/handbook/bsdinstall/_index.adoc index 7286e61806..0cccc616ba 100644 --- a/documentation/content/en/books/handbook/bsdinstall/_index.adoc +++ b/documentation/content/en/books/handbook/bsdinstall/_index.adoc @@ -1070,10 +1070,8 @@ Here is a summary of the options that can be enabled in this menu: * `random_pid` - Randomize the PID of processes. * `clear_tmp` - Clean `/tmp` when the system starts up. * `disable_syslogd` - Disable opening the syslogd network socket. By default, FreeBSD runs syslogd in a secure way with `-s`. This prevents the daemon from listening for incoming UDP requests on port 514. With this option enabled, syslogd will instead run with `-ss`, which prevents syslogd from opening any port. For more information, see man:syslogd[8]. -* `disable_sendmail` - Disable the sendmail mail transport agent. * `secure_console` - Make the command prompt request the `root` password when entering single-user mode. * `disable_ddtrace` - DTrace can run in a mode that affects the running kernel. Destructive actions may not be used unless explicitly enabled. Use `-w` to enable this option when using DTrace. For more information, see man:dtrace[1]. -* `enable_aslr` - Enable address layout randomization. For more information about address layout randomization the link:https://en.wikipedia.org/wiki/Address_space_layout_randomization[Wikipedia article] can be consulted. [[bsdinstall-addusers]] === Add Users