From owner-freebsd-security  Thu Feb  4 06:45:17 1999
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id GAA23924
          for freebsd-security-outgoing; Thu, 4 Feb 1999 06:45:17 -0800 (PST)
          (envelope-from owner-freebsd-security@FreeBSD.ORG)
Received: from host07.rwsystems.net (kasie.rwsystems.net [209.197.192.103])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id GAA23912
          for <freebsd-security@FreeBSD.ORG>; Thu, 4 Feb 1999 06:45:13 -0800 (PST)
          (envelope-from jwyatt@RWSystems.net)
Received: from kasie.rwsystems.net([209.197.192.103]) (1465 bytes) by host07.rwsystems.net
	via sendmail with P:esmtp/R:bind_hosts/T:inet_zone_bind_smtp
	(sender: <jwyatt@RWSystems.net>) 
	id <m108Pqf-000bxaC@host07.rwsystems.net>
	for <freebsd-security@FreeBSD.ORG>; Thu, 4 Feb 1999 08:33:41 -0600 (CST)
	(Smail-3.2.0.104 1998-Nov-20 #1 built 1998-Dec-24)
Date: Thu, 4 Feb 1999 08:33:41 -0600 (CST)
From: James Wyatt <jwyatt@RWSystems.net>
To: Darren Reed <avalon@coombs.anu.edu.au>
cc: freebsd-security@FreeBSD.ORG
Subject: Re: tcpdump
In-Reply-To: <199902040830.TAA13906@cheops.anu.edu.au>
Message-ID: <Pine.BSF.4.05.9902040828020.14557-100000@kasie.rwsystems.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

On Thu, 4 Feb 1999, Darren Reed wrote:
> In some mail from Coranth Gryphon, sie said:
> [...]
> > If you want to think about it another way, consider it one step
> > towards shipping a "Hardening Kit" for FreeBSD.
> 
> How much more rubbish do we have to read about bpf impacting the
> security of a system ?
	[ ... several useful points deleted, but you remember, right? ... ]

Hate to sound like the 60's, but "Right On, Man!". I would hate to see us
with dozens of Kernel disks (like Linux), but I like the config file idea.
It would allow a simple SB16 setup without including another kernel or
explaining LINT v.s. GENERIC and vi operations to some of my friends.
Linux kernel config menu is nice, though.

The crypto-sigs on the ROM would be better than TripWire sigs on a floppy
for the standard executables. For packages, would you have a list w/the
pkg and a sig for the lists?

Thanks!


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message