From owner-freebsd-current@freebsd.org Wed Sep 19 13:28:30 2018 Return-Path: Delivered-To: freebsd-current@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id CFE7B109B220 for ; Wed, 19 Sep 2018 13:28:30 +0000 (UTC) (envelope-from jbtakk@iherebuywisely.com) Received: from mailman.ysv.freebsd.org (mailman.ysv.freebsd.org [IPv6:2001:1900:2254:206a::50:5]) by mx1.freebsd.org (Postfix) with ESMTP id 7410F80B03 for ; Wed, 19 Sep 2018 13:28:30 +0000 (UTC) (envelope-from jbtakk@iherebuywisely.com) Received: by mailman.ysv.freebsd.org (Postfix) id 350AC109B21D; Wed, 19 Sep 2018 13:28:30 +0000 (UTC) Delivered-To: current@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 23DAD109B21B for ; Wed, 19 Sep 2018 13:28:30 +0000 (UTC) (envelope-from jbtakk@iherebuywisely.com) Received: from aibo.runbox.com (aibo.runbox.com [91.220.196.211]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id BD07680B02 for ; Wed, 19 Sep 2018 13:28:29 +0000 (UTC) (envelope-from jbtakk@iherebuywisely.com) Received: from [10.9.9.128] (helo=rmmprod06.runbox) by mailtransmit03.runbox with esmtp (Exim 4.86_2) (envelope-from ) id 1g2cWk-00059A-AE for current@freebsd.org; Wed, 19 Sep 2018 15:28:22 +0200 Received: from mail by rmmprod06.runbox with local (Exim 4.86_2) (envelope-from ) id 1g2cWk-0005mY-8K for current@freebsd.org; Wed, 19 Sep 2018 15:28:22 +0200 Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Received: from [Authenticated user (846156)] by runbox.com with http (RMM6); for ; Wed, 19 Sep 2018 13:28:22 GMT From: "Jeffrey Bouquet" To: "current" Subject: just a FYI Date: Wed, 19 Sep 2018 06:28:22 -0700 (PDT) X-Mailer: RMM6 Message-Id: X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Sep 2018 13:28:31 -0000 /usr/ports/security/lockdown [ sorry if this is a PR or for ports- ] altered fstab, login.conf and ttys locking me out of my main machine, proba= bly due to the password hash, but only a daily backup helped me login again and fix= the=20 damages, with a few files "hardened" maybe but at a cost of uncertainty=20 as to whether the net benefit was good/bad once the system is back up, as it is now. It fortunately only took me about an hour. This would have been much mor= e=20 problematic if I had not had 14 years experience in FreeBSD. Can someone alter the port to log its actions, create backups, ask permis= sion for each block of edits it is about to undertake, etc, so someone with critical= server data or less of a backup doesn't suffer the same? Something like a mergemaster w= ould...=20=