From owner-freebsd-hackers Fri May 8 16:33:56 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id QAA10805 for freebsd-hackers-outgoing; Fri, 8 May 1998 16:33:56 -0700 (PDT) (envelope-from owner-freebsd-hackers@FreeBSD.ORG) Received: from freefall.freebsd.org (freefall.FreeBSD.ORG [204.216.27.21]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id QAA10746 for ; Fri, 8 May 1998 16:33:14 -0700 (PDT) (envelope-from fiber@phy.iitkgp.ernet.in) Received: from milan.doe.ernet.in (milan.doe.ernet.in [202.41.99.2]) by freefall.freebsd.org (8.8.8/8.8.5) with SMTP id QAA14501 for ; Fri, 8 May 1998 16:30:07 -0700 (PDT) Received: from iitkgp.ernet.in by milan.doe.ernet.in (4.1/SMI-4.1) id AA26408; Sat, 9 May 98 04:50:24+050 Received: from phy.iitkgp.ernet.in by iitkgp.ernet.in (SMI-8.6/SMI-SVR4) id FAA15569; Sat, 9 May 1998 05:01:48 +0530 Message-Id: <3553963E.F2C5DE6@phy.iitkgp.ernet.in> Date: Sat, 09 May 1998 05:03:18 +0530 From: Sanjit Roy X-Mailer: Mozilla 4.04 [en] (Win95; I) Mime-Version: 1.0 To: freebsd-hackers@freefall.cdrom.com Subject: how safe is FreeBSD 2.2.5 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG I need some advise regarding the security level in FreeBSD. Lately, a lot of students in my university campus have been into hacking activity. I have a Linux (kernel 1.2.8) system on one of my mail gateways and it's a piece of cake becoming 'root' on that machine. I immediately need to upgrade that to either REDHAT Linux 5.0 or FreeBSD 2.2.5. I have both the flavours of unix available with me. What I want to know is : 1. which of the two is more secure? 2. Is shadow util really effective in Linux. Don't know if there's one in FreeBSD? 3. what do i have to do/install to make my system secure i.e, what are the available patches and where do i get them? Hoping to hear from you soon. Sanjit. fiber@phy.iitkgp.ernet.in To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message