4 ms·

Is/are there any sort of FreeBSD distributions which change these defaults as a part of their distribution process?

crest 4y ago
The FreeBSD release building tools [1] support customisation. You can either patch the defaults in the code or include different default configuration files. Don't take this rant too seriously. [1]: https://www.freebsd.org/cgi/man.cgi?query=release&apropos=0&sektion=7&manpath=FreeBSD+13.1-RELEASE+and+Ports&arch=default&format=html https://www.freebsd.org/cgi/man.cgi?query=release&apropos=0&...
GekkePrutser 4y ago
No, FreeBSD is really only one distribution which is a big plus IMO. The GNU/Linux world is very fragmented because of this. Now, there are some spinoffs like DesktopBSD, GhostBSD and HelloSystem but they're very small compared to the situation with Linux where there are several major distros. But if your focus is security, OpenBSD would be a good alternative for sure.
- kastagg 4y ago
  If everyone using Linux should use one distribution, which one should it be? Who gets to run it?
  - GekkePrutser 4y ago
    I'm not saying Linux should change. Just that this is a plus for FreeBSD for me.
  - deleted 4y ago
    [deleted]
yjftsjthsd-h 4y ago
HardenedBSD?
- phoe-krk 4y ago
  TIL! Thanks.
mrweasel 4y ago
There is Debian GNU/kFreeBSD, but I’m not sure it’s maintained.
0x457 4y ago
There is HardenedBSD, but FreeBSD long since then give you option to harden it during installation. Some of these recommendations in the post are wrong, so don't follow it to the letter. Post is written by an angry OpenBSD fan.
- acoppora 4y ago
  I see a lot of negative and dismissive comments from you in this thread. Perhaps you'd care to quantify some of the things you say are wrong. I'd also recommend against ad hominem attacks against someone who wrote an article you disagree with. The "hardening" menu in the installer is pretty pathetic if we're being honest. "enable /tmp cleaning"... wow. I'm secure now.
  - nix23 4y ago
    >I see a lot of negative and dismissive comments from you in this thread. Please stop with that. >"enable /tmp cleaning"... wow. I'm secure now. That's one point, you know that. And then you do the "negative and dismissive comments" too. >pretty pathetic if we're being honest True it is...but not the hardening dialog or secure-level.

The FreeBSD release building tools [1] support customisation. You can either patch the defaults in the code or include different default configuration files. Don't take this rant too seriously. [1]: https://www.freebsd.org/cgi/man.cgi?query=release&apropos=0&sektion=7&manpath=FreeBSD+13.1-RELEASE+and+Ports&arch=default&format=html https://www.freebsd.org/cgi/man.cgi?query=release&apropos=0&...

GekkePrutser 4y ago

No, FreeBSD is really only one distribution which is a big plus IMO. The GNU/Linux world is very fragmented because of this. Now, there are some spinoffs like DesktopBSD, GhostBSD and HelloSystem but they're very small compared to the situation with Linux where there are several major distros. But if your focus is security, OpenBSD would be a good alternative for sure.

kastagg 4y ago
If everyone using Linux should use one distribution, which one should it be? Who gets to run it?
- GekkePrutser 4y ago
  I'm not saying Linux should change. Just that this is a plus for FreeBSD for me.
- deleted 4y ago
  [deleted]

yjftsjthsd-h 4y ago

HardenedBSD?

phoe-krk 4y ago
TIL! Thanks.

mrweasel 4y ago

There is Debian GNU/kFreeBSD, but I’m not sure it’s maintained.

0x457 4y ago

There is HardenedBSD, but FreeBSD long since then give you option to harden it during installation. Some of these recommendations in the post are wrong, so don't follow it to the letter. Post is written by an angry OpenBSD fan.

acoppora 4y ago
I see a lot of negative and dismissive comments from you in this thread. Perhaps you'd care to quantify some of the things you say are wrong. I'd also recommend against ad hominem attacks against someone who wrote an article you disagree with. The "hardening" menu in the installer is pretty pathetic if we're being honest. "enable /tmp cleaning"... wow. I'm secure now.
- nix23 4y ago
  >I see a lot of negative and dismissive comments from you in this thread. Please stop with that. >"enable /tmp cleaning"... wow. I'm secure now. That's one point, you know that. And then you do the "negative and dismissive comments" too. >pretty pathetic if we're being honest True it is...but not the hardening dialog or secure-level.