Date: Tue, 24 Jan 2006 13:34:41 +0000 From: dom@happygiraffe.net (Dominic Mitchell) To: Roger Grosswiler <roger@gwch.net> Cc: freebsd-stable@freebsd.org Subject: Re: how to harden freebsd? Message-ID: <20060124133441.GA67884@ppe.happygiraffe.net> In-Reply-To: <20060123165902.GA31758@ppe.happygiraffe.net> References: <1138034563.2766.6.camel@niobe> <20060123165902.GA31758@ppe.happygiraffe.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Jan 23, 2006 at 04:59:02PM +0000, Dominic Mitchell wrote: > On Mon, Jan 23, 2006 at 05:42:42PM +0100, Roger Grosswiler wrote: > > i think about jailing some "processes" on a new freebsd-system. Is there > > also another way, to harden freebsd e.g. like selinux? > > Have a look at security(7) for an overview of the existing FreeBSD > security options. Also, jail(8) has some bits. > > There's no /direct/ SELinux, although much of the same ground is covered > by the TrustedBSD stuff. Have a look over the web site: > > http://www.trustedbsd.org/ Whilst others have pointed at the MAC section in the handbook, you might like this little introduction on the subject: http://hacks.oreilly.com/pub/h/1466 -Dom
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060124133441.GA67884>