Questions tagged [freebsd]
A free Unix-like operating system descended from Research Unix via the Berkeley Software Distribution (BSD).
18
questions
2
votes
1
answer
109
views
Is it possible for a hostname lookup to be temporarily lying (wrong ISP)?
In 2017, I was running a local website on my own dedicated server in a professional data center. FreeBSD. Installed by me remotely. Maintained carefully by me. No other human users than myself. I was ...
- 21
0
votes
3
answers
289
views
Would FreeBSD and OpenBSD have similar known-past-vulnerability stats if they were configured similarly?
OpenBSD has had much fewer "code execution" vulnerabilities and even fewer exploits than FreeBSD, according to https://cvedetails.com :
https://www.cvedetails.com/product/163/Openbsd-...
- 323
2
votes
1
answer
903
views
Is native OpenZFS (on FreeBSD) block-level encryption secure?
I am considering using OpenZFS on FreeBSD. I am not quite sure how secure native OpenZFS encryption is? If somebody steals my server and the disks, is he able to decrypt the files?
In a Discord room I ...
- 1,445
0
votes
1
answer
2k
views
LFI to RCE through User-Agent
I'm doing a pentest on a FreeBSD machine running CuppaCMS. Already managed to login into the CMS with admin privilege, but it only takes me to a manager menu, with some options to change some tables ...
3
votes
0
answers
116
views
Do BSD jails protect against some vulnerability class that LXC doesn't?
You can find many claims online regarding BSD jails being "better" in some way than Linux namespaces for containment, but they typically lack technical details.
From what I understand, the attack ...
- 215
1
vote
0
answers
366
views
Tightly locking down a FreeBSD jail
Suppose one is running a single internet-facing daemon, as a service in a FreeBSD jail, and expects targeted hostile attacks targeting open WAN ports and services.
Like many services, the service and ...
- 1,674
2
votes
1
answer
1k
views
Do systemd-nspawn containers provide the same security guarantees as FreeBSD jails?
I am evaluating the systemd-nspawn containers security and would like to know if the systemd-nspawn containers provide the same security guarantees as FreeBSD jails?
Specially, can an attacker escape ...
- 121
3
votes
1
answer
199
views
How can I ensure higher levels of privacy when hosting others' emails?
I can set up my own email server, and quite happy with it, using standard open source components - postfix, roundcube, etc on top of HardenedBSD or OpenBSD.
I'd like to offer the use of my email ...
- 1,674
2
votes
1
answer
505
views
Is the traversal permission in a Unix filesystem exploitable by itself, in the absence of any other permissions/ACLs?
Scenario/question:
A unix directory tree has NTFv4 ACLs configured to allow an unprivileged account traversal on all dirs (but no other ACL granting further rights on any file/dir anywhere
In such a ...
- 1,674
1
vote
0
answers
1k
views
Are BSD jails a "huge security liability"? [closed]
In this 2014 blog post from an apparently anti-BSD blog, the author criticizes BSD jails for being poorly designed and therefore insecure.
The opening paragraph reads:
If you’re thinking of ...
- 541
0
votes
1
answer
355
views
mySQL into outfile strange behaviour
I have sql-injection with file_priv=Y (root user) but I can only create file in /tmp and /var/tmp directories even when i have 777 permissions to destination folder - mysql server just won't create ...
- 143
4
votes
1
answer
3k
views
How to use openssl ca with prime256v1?
I am new to the encryption world, and reading about this, most websites say to use the prime256v1 for better performance and security.
After some days testing, finally I get my openssl CA structure ...
- 41
1
vote
1
answer
4k
views
Is BSD more secure than GNU/Linux? [closed]
BSD controls the OS while Linux is just a kernel. BSD is less popular than Linux, but which one is better in terms of security?
- 2,127
8
votes
1
answer
3k
views
Is receiving IPv4 connections on AF_INET6 sockets insecure?
The FreeBSD man page for inet6 has the following:
By default, FreeBSD does not route IPv4 traffic to AF_INET6 sockets.
The default behavior intentionally violates RFC2553 for security
reasons. Listen ...
- 1,380
0
votes
1
answer
470
views
Do I need dedicated firewall? [closed]
I have two servers in the datacenter.
FreeBSD <--> Windows Server
FreeBSD configured as a gateway for Windows Server.
What is the best:
FreeBSD has only firewall. All services are on the Win ...
- 11
3
votes
2
answers
2k
views
Firewall egress filtering / quick whitelisting
Suppose your Aunt or Uncle is easily fooled by phishing attempts and their computer has multiple root kits and key loggers running. Assume their computing habits will never change.
Looking at his ...
- 215
2
votes
2
answers
2k
views
How to hide or obfuscate the type of OS?
I get the OS type of a remote host by:
connecting to an open port (telnet <host> 22);
using Nmap (nmap -A <host>).
What are techniques and how to hide or change the information about OS? ...
- 123
6
votes
1
answer
1k
views
How secure is OpenSSH on FreeBSD?
In a discussion about the recent OpenSSL information disclosure vulnerability, the subject of OpenSSH being vulnerable came up. While OpenSSH is not vulnerable due to the problem lying in the TLS ...
- 5,494