From owner-freebsd-questions@FreeBSD.ORG Thu Jan 21 15:32:03 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 7F78B106566C for ; Thu, 21 Jan 2010 15:32:03 +0000 (UTC) (envelope-from henry.olyer@gmail.com) Received: from mail-fx0-f218.google.com (mail-fx0-f218.google.com [209.85.220.218]) by mx1.freebsd.org (Postfix) with ESMTP id 188628FC1A for ; Thu, 21 Jan 2010 15:32:02 +0000 (UTC) Received: by fxm10 with SMTP id 10so96172fxm.34 for ; Thu, 21 Jan 2010 07:32:01 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:date:message-id:subject :from:to:content-type; bh=gFm32vc0WCamZdtlvHeXzGkR4inMxy6SRWF3us1ERew=; b=c4sRF4abB4vZL6XPndPisPHl/0Cwbe5g1fdVTGXCbFY5CTwsRw0OjoblYhEQ4PWRpg zVJJ1KO2YhcXDrgo/fBp1ILHNqfCpx3kA0yjuzggRgEf5r9G56cZp+CCNEnPMk8SLU+U 6Vy2Dt7V9ON+EILe6N+XZ94NLs5vOhKxxIEa0= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=QSM8q1ChInGAShN6CakOREO2BpITvH81ximrS6rBNw/02o4P93q9PAmBwGM2InKGM5 iF9DYHyt4RaU/k4i1FegPvWiZYw96fMVD3KoOfdvSppG43YzrW3zBwZuAdfSm+jKm+7A hfbu1X4oO+Q5SdEyLNmJat3LKSV1apQBJtKEY= MIME-Version: 1.0 Received: by 10.223.143.70 with SMTP id t6mr1544873fau.101.1264087921778; Thu, 21 Jan 2010 07:32:01 -0800 (PST) Date: Thu, 21 Jan 2010 10:32:01 -0500 Message-ID: <1d7089c41001210732t233bdf46pbbc2ab5be1fdd360@mail.gmail.com> From: Henry Olyer To: freebsd-questions@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: hardening FreeBSD, already using GBDE X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Jan 2010 15:32:03 -0000 For example, the editor I use normally writes to /tmp -- I changed that, making it slower, but in the event that someone takes my laptop I want to sleep at night. I've no problem letting some poor person make a windoz machine out of my laptop -- but I don't want to share my work, my intellectual property. (I do research.) So, I'm looking for a list of changes to make, hacks really, that will further tighten up security. Can you point me to such a list of to-do's, please. Just send mail to henry.olyer@gmail.com --jg