Page Menu
Home
FreeBSD
Search
Configure Global Search
Log In
Files
F111619301
D9641.diff
No One
Temporary
Actions
View File
Edit File
Delete File
View Transforms
Subscribe
Mute Notifications
Flag For Later
Award Token
Size
1 KB
Referenced Files
None
Subscribers
None
D9641.diff
View Options
Index: head/usr.sbin/bsdinstall/scripts/hardening
===================================================================
--- head/usr.sbin/bsdinstall/scripts/hardening
+++ head/usr.sbin/bsdinstall/scripts/hardening
@@ -36,15 +36,15 @@
--title "System Hardening" --nocancel --separate-output \
--checklist "Choose system security hardening options:" \
0 0 0 \
- "0 hide_uids" "Hide processes running as other users" ${hide_uids:-off} \
- "1 hide_gids" "Hide processes running as other groups" ${hide_gids:-off} \
- "2 read_msgbuf" "Disable reading kernel message buffer for unprivileged users" ${read_msgbuf:-off} \
- "3 proc_debug" "Disable process debugging facilities for unprivileged users" ${proc_debug:-off} \
- "4 random_pid" "Randomize the PID of newly created processes" ${random_pid:-off} \
- "5 stack_guard" "Insert stack guard page ahead of the growable segments" ${stack_guard:-off} \
- "6 clear_tmp" "Clean the /tmp filesystem on system startup" ${clear_tmp:-off} \
- "7 disable_syslogd" "Disable opening Syslogd network socket (disables remote logging)" ${disable_syslogd:-off} \
- "8 disable_sendmail" "Disable Sendmail service" ${disable_sendmail:-off} \
+ "0 hide_uids" "Hide processes running as other users" ${hide_uids:-on} \
+ "1 hide_gids" "Hide processes running as other groups" ${hide_gids:-on} \
+ "2 read_msgbuf" "Disable reading kernel message buffer for unprivileged users" ${read_msgbuf:-on} \
+ "3 proc_debug" "Disable process debugging facilities for unprivileged users" ${proc_debug:-on} \
+ "4 random_pid" "Randomize the PID of newly created processes" ${random_pid:-on} \
+ "5 stack_guard" "Insert stack guard page ahead of the growable segments" ${stack_guard:-on} \
+ "6 clear_tmp" "Clean the /tmp filesystem on system startup" ${clear_tmp:-on} \
+ "7 disable_syslogd" "Disable opening Syslogd network socket (disables remote logging)" ${disable_syslogd:-on} \
+ "8 disable_sendmail" "Disable Sendmail service" ${disable_sendmail:-on} \
2>&1 1>&3 )
exec 3>&-
File Metadata
Details
Attached
Mime Type
text/plain
Expires
Fri, Mar 7, 2:36 AM (18 h, 21 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
17023764
Default Alt Text
D9641.diff (1 KB)
Attached To
Mode
D9641: Enable bsdinstall hardening options by default
Attached
Detach File
Event Timeline
Log In to Comment