Date: Fri, 4 Apr 2025 22:01:42 +0200 From: Albert Shih <Albert.Shih@obspm.fr> To: David Christensen <dpchrist@holgerdanske.com> Cc: questions@freebsd.org Subject: Re: Securing FreeBSD. Message-ID: <Z_A6pmQPuZU5lTEW@io.chezmoi.fr> In-Reply-To: <bb89a12f-0d73-411f-a34f-8a8224c30744@holgerdanske.com> References: <Z_ATQA2k-3umIaLo@io.chezmoi.fr> <bb89a12f-0d73-411f-a34f-8a8224c30744@holgerdanske.com>
index | next in thread | previous in thread | raw e-mail
Le 04/04/2025 à 11:45:16-0700, David Christensen a écrit > On 4/4/25 10:13, Albert Shih wrote: > > Hi everyone. > > > > Is they are any way to secure a FreeBSD to prevent destroying data ? > > > > I find out even with > > > > kern.securelevel=2 > > > > It sounds like you want read-only storage media (?). Yeah...exactly. The purpose is to recycle some old server to create some «non erasable» backup in addition to our «normal» backup. They are two thing I will not consider in the equation : Security problem in FreeBSD. Physical access to the server. beside that I want to make the server safest as possible. > Burning your data to a CD-R/DVD-R/BD-R disc comes to mind. well....not possible. Too many To. And the data change daily. > Another option is a USB flash drive with a physical write-protect switch: > > https://www.kanguru.com/products/defender-elite30-usb-3-0-hardware-encrypted-flash-drive > > https://www.kanguru.com/products/kanguru-defender-elite300-fips-140-2-certified-secure-superspeed-usb-3-0-hardware-encrypted-flash-drive?variant=41077736833139 > Same issue. Not possible. Regards. -- Albert SHIH 🦫 🐸 France Heure locale/Local time: ven. 04 avril 2025 21:56:07 CESThome | help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Z_A6pmQPuZU5lTEW>