Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 16 Oct 1999 04:50:18 -0400 (EDT)
From:      Mike Nowlin <mike@argos.org>
To:        Steve Reid <sreid@sea-to-sky.net>
Cc:        "Rashid N. Achilov" <shelton@sentry.granch.ru>, freebsd-security@FreeBSD.ORG
Subject:   Re: kern.securelevel and X
Message-ID:  <Pine.LNX.4.05.9910160444510.25028-100000@jason.argos.org>
In-Reply-To: <19991015133335.A410@grok.localnet>

next in thread | previous in thread | raw e-mail | index | archive | help

> But I don't think FreeBSD has that capability. I haven't seen any
> mention of a FreeBSD aperture driver, not even in vaporware form.
> Maybe people just don't realize such a thing is possible?

...not really sure I should bring this up, but.......

My belief is that if you feel the necessity to run a machine (especially a
production box) under a higher secure level, you should not be using that
box for "general user uses", including X.  With the prices of fast
ethernet and motherboards these days, there's no reason why you can't make
a workstation for general use that doesn't really mind getting trashed if
somebody breaks in -- restore a backup tape, and you're ready to go.
Diskless workstations (slaved off the high-security machine) comes to
mind...

--mike




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.LNX.4.05.9910160444510.25028-100000>