Home GhostBSD
Showing posts with label GhostBSD. Show all posts
Showing posts with label GhostBSD. Show all posts

BSD News 05/09/2016

BSD News 05/09/2016
Add Comment

Last week in BSD

Releases: DesktopBSD, HardenedBSD, OPNsense, GhostBSD, OpenBSD
Other news: OpenBSD, BSDnow, ZFS, Let's Encrypt, g2k16, DragonFlyBSD,

BSDSec


Releases

DesktopBSD-2.0 Gnome test version

We are pleased to announce that DesktopBSD-2.0 Gnome test version is available,  more flavours will come soon.

Based on FreeBSD-10.3 amd64, mainly because UEFI is supported by FreeBSD only for amd64 architecture.

Before burning the ISO to a DVD, please check the md5 or sha256 of the downloaded ISO against those  from our repo

DesktopBSD ISOs are hybrid, UEFI enabled, and can be written to USB sticks using the 'dd' command:
dd if=DESKTOPBSD-2.0-FBSD-20160903-152502-gnome-amd64.iso of=/dev/daN bs=1M conv=sync

(where /dev/daN is your's usb stick)
Bsdstats is included as in DesktopBSD-1.7 Release, so DesktopBSD will be counted in www.bsdstats.org.
Bsdstats can be launched or is launched from console using bsdstats.send, via rc.conf or via cron from /usr/local/etc/poeriodic/monthly/300.statistics.

We have included tools to:
  • Connect to desktopbsd irc channel to get help using desktopbsd-irc
  • Open bugtracker page in forums using desktopbsd-bug-report
  • Get system information using inxi scripts ported from linux

Inxi can be run from console, terminal and even under irc client to send informations in irc channel directly.
desktopbsd-irc plus inxi are great tools to help users in #desktopbsd channel.

ISOs are installable using gbi (GhostBSD Installer) and includes another GhostBSD tools.
Please notice that Eric Turgeon ( GhostBSD founder and developer ) is also in our's dev team.
 
Please test and send bugs using desktopbsd-bug-report to be able to fix them.

To enable desktop icons on desktop please run dconf-editor and go to org.gnome.desktop.background and check show-desktop-icons. (desktop icons are not enabled by default due to a gnome bug)

We'll use for support www.desktopbsd.weebly.com website, desktopbsd.boards.net forum and #desktopbsd irc channel on irc.freenode.server.


New stable version: HardenedBSD-stable 11-STABLE v46.2

HardenedBSD-11-STABLE-v46.2 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...
Installers: http://installer.hardenedbsd.org/pub/HardenedBSD/releases/amd64/amd64/IS...
Git repo: https://github.com/HardenedBSD/hardenedBSD-stable.git
Highlights:
libarchive update (CVE fixes, FreeBSD SA candidate)
sqlite update (CVE fixes, FreeBSD SA candidate)

OPNsense 16.7.3 released

Patch notes:
  • system: allow selection of secondary console
  • system: added EFI as a console option
  • system: fixed status display of tiered gateway groups
  • system: allow to configure sudo usage for administrators
  • system: package manager can no longer uninstall the GUI package (marked as “vital”)
  • system: also beep on factory reset
  • system: added opnsense-code command line utility
  • interfaces: do not store packet captures in /root
  • interfaces: sort interface listings by name only
  • interfaces: do not prevent configuring an IP used by the PPTP and L2TP plugins
  • firewall: add normalisation options for source port and direction
  • firewall: improved parsing of alias input
  • firewall: fixed nesting of aliases with underscores in their names
  • openvpn: fix script mismatch on export page
  • openvpn: added reneg-sec option to server to allow persistent TOTP sessions
  • openvpn: added option to prevent usage of username-as-common-name
  • services: fix WOL widget link
  • services: aligned backend calls of DNS and DHCP
  • services: fix writing of DNS resolver host entries
  • services: simplify configuring of DNS resolver listening addresses
  • services: allow proxy to match against SSL URLs only (contributed by Fabio Mello)
  • lang: updated Source Sans Pro font to improve the cyrillic experience
  • lang: Italian is now a release language (contributed by Antonio Prado)
  • lang: minor updates for Russian (contributed by Smart-Soft Ltd.)
  • lang: minor updates for German and French
  • ports: haproxy 1.6.8[1], php 5.6.25[2], sqlite 3.14.1[3]
  • ports: openvpn 2.3.12[4], libxml 2.9.4[5]

GhostBSD 10.3 Enoch Finally Available

After a year of development, testing and debugging we are pleased to announce the release of GhostBSD 10.3 MATE & XFCE which is available on SourceForge and torrents for the amd64 and i386 architectures.
What's new in GhostBSD 10.3
  • ZFS support
  • UEFI support
  • Installer custom partition creation subjection
  • VirtualBox support get setup at boot time if needed.
  • 4k partition alignment by default
  • GhostBSD Software will be updated Quarterly which will bring more stability to GhostBSD still user will be able to change it to latest to have the latest software update.
What changed in GhostBSD 10.3
  • The installer partition editor UI and partitioning have been improved
  • VirtualBox additions would be uninstall after installer if it is not runnig in a VirtualBox
  • Slim is replacing GDM.
  • Networkmgr display the full SSID
  • Replaced the HTML/CSS installation slide with a GTK/CSS the slide.
What has been fix.
  • Networkmgr SSID list
  • VirtualBox supports
  • Installer MBR partition issue
  • Some installer text error
  • Keyboard layout after installation with MATE
  • Network Manager slowness to open the menu
  • Network Manager icon tray crash
  • Localtime time as been fix
  • Fix boot partition for GPT to supports freebsd-boot, bios-boot and efi
  • System Update duplicating the whole install under /boot/kernel.old
  • sudo configuration
  • Wifi down by default
  • Locales are not correctly set up on installation
Where to download:
The image checksum's, hybrid ISO(DVD, USB) images are available here:
http://www.ghostbsd.org/download


OpenBSD 6.0 released

September 1st, 2016: The OpenBSD team announces the availability of 6.0! 
We are pleased to announce the official release of OpenBSD 6.0.
This is our 40th release on CD-ROM (and 41st via FTP/HTTP).  We remain
proud of OpenBSD's record of more than twenty years with only two remote
holes in the default install.

As in our previous releases, 6.0 provides significant improvements,
including new features, in nearly all areas of the system:
Read more...

News

ZFS, The “Universal” Filesystem | BSD Now 157

This week on BSDNow, we have an interview with Richard Yao, who will be telling us about the experience & challenges of porting ZFS to Linux. That plus the latest news & feedback is coming your way, on your place to B….SD!
View attached file (533 MB, video/mp4)

Let's Encrypt client imported into -current

Kristaps Dzonsons' Let's Encrypt client, letskencrypt, has been imported into OpenBSD-current as acme-client.
letskencrypt, which has previously been available as a port, is a privilege-separated Let's Encrypt (ACME protocol) client written in C.


Code stuff


Interesting articles


Read More»

BSD News 15/08/2016

BSD News 15/08/2016
Add Comment

Last week in BSD

Releases: GhostBSD
Other news: OPNsense, HardenedBSD, OpenBSD, Linux, BSDnow, n2k16, Wallpaper, DragonFlyBSD

BSDSec



Releases

GhostBSD 10.3 RC1 is ready for testing

This first RC release is ready for testing new feature in GhostBSD 10.3, MATE and XFCE is available on SourceForge for the i386, amd64, and amd64-uefi architectures.
Language Undefined

News

New Core Team Member

The OPNsense project is growing rapidly and it’s with great pleasure that the OPNsense core team may announce that our team will be strengthened with Shawn Webb. Shawn has already  been doing lots of great work and his formal membership is seen as a logical step forward by all of us.
Shawn Webb Over the past year, I have had the wonderful experience of working with the OPNsense core team in porting over HardenedBSD’s robust ASLR
implementation. It is with pleasure and humility that I have accepted their invitation to join the core team. My overarching goal will be to port the main features of HardenedBSD to OPNsense.
Address Space Layout Randomization, or ASLR for short, is an exploit mitigation technology that aims to make certain kinds of vulnerabilities
harder to successfully exploit. In order to fully apply ASLR, applications must be compiled as a Position-Independent Executable (PIE). In the short term, my next goal is to enable PIE fully across OPNsense’s ports tree. I’m using HardenedBSD’s ports tree and package building infrastructure as a test bed prior to importing into OPNsense.
OPNsense is investigating migrating to 11.0-RELEASE for its 17.1 release. The Virtual Memory (VM) subsystem has changed drastically between FreeBSD 10 and FreeBSD 11. Since ASLR deals with the VM subsystem, extreme care must be taken in the update of the codebase from FreeBSD 10.3 to 11.0. I will assist in those efforts by freshly porting over the ASLR implementation from HardenedBSD 11.0 to OPNsense’s FreeBSD 11.0 codebase.
I look forward to being a part of the OPNsense core team. The coordination between HardenedBSD and OPNsense will bring a more solid
foundation on which home users and enterprises alike can build secure and scalable networks.

OpenBSD tmpfs on its last legs

As a result of apparent lack of maintenance, Theo de Raadt has disabled tmpfs.

CVSROOT: /cvs
Module name: src
Changes by: deraadt@cvs.openbsd.org 2016/07/25 13:52:56

Modified files:
 sys/conf       : GENERIC 

Log message:
disable tmpfs because it receives zero maintainance.

You probably didn’t use this anyway

The last bits of Linux emulation have been removed from DragonFly.  It’s 32-bit, so it’s been unsupported since DragonFly went to 64-bit only with the 4.0 release.  Also, some other 32-bit only items are gone, including the cs, ep, ex, fe, and vx network drivers.  It’s almost impossible that anyone was using it, but it’s notable because that’s some… 15-20k lines of code gone?  Removal of unused code is also positive.

Myths, Pi's & Features, oh my! | BSD Now 154

This week on BSDNow, we are taking a look at a few different tutorials, including running your very own RPi web-server. (Come-on, you know you’ve thought of it). Plus we have a GhostBSD tutorial, a look at a GitHub project to run Steam Linux on FreeBSD 11 & more!
You’ll want to stick-around for your place to B...SD!
View attached file (321 MB, video/mp4)


Code stuff


Interesting articles


Read More»

BSD News 31/05/2016

BSD News 31/05/2016
Add Comment

Last week in BSD

Releases: pfSense, NetBSD, OPNsense, GhostBSD, SoloBSD,
Other news: Talks, OpenBSD, BSDnow, DragonFly BSD


BSDSec



Releases

pfSense 2.3.1 Update 1 Available

2.3.1 Update 1 (2.3.1_1) is now available. This includes one security fix to the web GUI, and 7 other bug fixes. The 2.3.1-RELEASE change list has been updated with an Update 1 section specifying the changes.
This update will reboot the system after installing.

NetBSD 7.0.1 released

The NetBSD Project is pleased to announce NetBSD 7.0.1, the first security/bugfix update of the NetBSD 7.0 release branch. It represents a selected subset of fixes deemed important for security or stability reasons. If you are running an earlier release of NetBSD, we strongly suggest updating to 7.0.1.
For more details, please see the release notes.
Complete source and binaries for NetBSD are available for download at many sites around the world. A list of download sites providing FTP, AnonCVS, SUP, and other services may be found at http://www.NetBSD.org/mirrors/

OPNsense 16.1.15 released

Here are the full patch notes for 16.1.15:
  • system: make authentication fallback configurable
  • system: settings cleanup and prettify
  • system: added explicit ETC timezone selection
  • high availability: add page for remote service control
  • high availability: properly enforce authentication
  • firmware: reboot and poweroff API actions
  • firmware: only kill GUI process, not captive portal
  • firmware: show errors in update window
  • firmware: keep polling for progress even when GUI restarts
  • backend: skip failing templates on bootup
  • trust: fix CA certificate count in overview
  • trust: allow key size up to 8192 bits
  • firewall: fix invalid NPT rule generation
  • firewall: speed up filter log pages
  • firewall: do not allow to change virtual IP mode after creation
  • firewall: moved settings page and rearranged settings accordingly
  • interfaces: unhook all but the last custom PHP module functions
  • interfaces: moved settings page and rearranged settings accordingly
  • dhcp: do not override RA settings after save
  • dns: resolver outgoing interface section moved to advanced as it will break setups with dynamic interfaces selected there
  • load balancer: sticky mode from firewall / system split off as separate setting
  • snmp: do not allow unicode in system location
  • intrusion detection: remove deprecated rbn-malvertisers.rules set
  • intrusion detection: add promiscuous mode / physical interface selection
  • overall: fix menu width on small size screens
  • overall: numerous translation fixes (contributed by Frederic Lietart)
  • overall: numerous translation fixes (contributed by Fabian Franz)
  • plugins: assorted bugfixes for HAProxy (contributed by Frank Wall)
  • mvc: fix translations by adding an escaping wrapper

GhostBSD 10.3 ALPHA2 is ready for testing

This second ALPHA development release is for testing and debugging new feature in GhostBSD 10.3, MATE and XFCE is available on SourceForge for the i386, amd64, and amd64-uefi architectures.

SoloBSD 10.3-STABLE-v46.1

There is a new build of SoloBSD 10.3-STABLE based on the latest HardenedBSD stable branch version 46.1
You can grab it from Here. (61.6 Mb)
root password: solobsd


News

FreeBSD Now Has Initial Graphics Support For Bhyve

Bhyve, the hypervisor developed by FreeBSD that supports running BSD/Linux/Windows guests, has initial graphics support...

The Devil in the Details - Switching to BSD from Linux

Most Free/Open Source Software users run Linux as their operating system of choice, choosing one (or more) of the 300 or so distros currently active on DistroWatch. Not as many have crossed the street, rhetorically speaking, and taken a look at the other Open Source operating system, BSD and its many variants.
As a long time and current Linux user new to PC-BSD — essentially the BSD equivalent to Linux Mint — my intention is to:
· Outline the (many) similarities and (few) differences between Linux and BSD,
· Walk the audience through the process of moving from Linux to BSD, unless the audience is in a hurry, then I’ll run them through it,
· Describe the ease-of-use and pitfalls of day-to-day use of PC-BSD for the average user, and
· How to pitch in and make code and other contributions (e.g., documentation, translation) to BSD variants, even while doing the same for Linux distributions,
· And more!

Privilege Separation and Pledge (video)

This year's dotSecurity conference featured a presentation from OpenBSD founder Theo de Raadt, titled "Privilege Separation and Pledge." The video is now available here, in addition to the slides.

One small step for DRM, one giant leap for BSD | BSD Now 143

This week on BSDNow, we have an interview with Matthew Macy, who has some exciting news to share with us regarding the state of graphics on FreeBSD. That plus all the latest news on BSDNow, the place to B...SD!
View attached file (770 MB, video/mp4)

OpenBSD ARMv7 now has a bootloader

Progress on the armv7 platform continues, and Jonathan Gray writes in to the arm@ mailing list with some promising news:
There is now a bootloader for armv7 thanks to kettenis@ Recent armv7 snapshots will configure disks to use efiboot and install device tree dtb files on a fat partition at the start of the disk. u-boot kernel images are no longer part of the release but can still be built for the time being. We are going to start assuming the kernel has been loaded with a dtb file to describe the hardware sometime soon. Those doing new installs can ignore the details but here they are. 


Code stuff



Interesting articles


Read More»

BSD News 02/05/2016

BSD News 02/05/2016
Add Comment

Last week in BSD

Releases: FreeBSD, BSDSec, OpenBSD, BSDnow, CheriBSD, BSDTalk, NFS, p2k16
Other news: SoloBSD, GhostBSD, OPNsense, pfSense, HardenedBSD


BSDSec


Releases

New stable release: HardenedBSD-stable 10-STABLE v44.3

New stable release: HardenedBSD-stable 10-STABLE v44.4

New stable version: HardenedBSD-stable HardenedBSD-11-CURRENT v46

HardenedBSD-11-CURRENT-v46 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...
 

pfSense 2.3 Update 1 Available

Since the new pkg system enables us to update pieces of the system individually, rather than the monolithic updates of the past, we have released a patch that fixes the NTP CVEs covered by FreeBSD SA 16:16.ntp. Updating ntpd from 4.2.8p6 to 4.2.8p7 is the only change.
This update appears as 2.3_1, for update 1. This should not be confused with 2.3.1, which is a full maintenance release coming soon. 2.3_1 is only available for those already running 2.3 release.
Note for this update, your version number will remain the same afterwards, still showing as 2.3-RELEASE.
This update does not trigger a reboot. The NTP service needs to be manually restarted under Status>Services afterwards.

OPNsense 16.1.12 released

The progress for our upcoming version 16.7 now accumulates to 3 full months. To that end we are making the transition from ALPHA to BETA on the 16.7 development series. And since we have been asked to incorporate development change logs as well, look no further (well, look below).
Anyway, 16.1.12 brings a handful of anticipated additions like FreeBSD’s package manager version 1.7.2 and the ability to use CoDel / FQ-Codel in the traffic shaper. We have also started to move services to the plugin framework instead of having them in the base installation. And, maybe as a last point, initial work for fixing the trusty apinger utility for gateway monitoring has surfaced.
Het bericht OPNsense 16.1.12 released verscheen eerst op OPNsense.

GhostBSD 10.3 ALPHA1 is now ready for Testing

Yes we skip 10.2 for 10.3 since was FreeBSD 10.3 was coming we thought we should wait for 10.3. This is the first ALPHA development release for testing and debugging for GhostBSD 10.3, only as MATE been released yet which is available on SourceForge and for the amd64 and i386 architectures.

SoloBSD 10.3-STABLE-v44.3

SoloBSD 10.3-STABLE-v44.4

There is a new build of SoloBSD 10.3-STABLE based on the latest HardenedBSD stable branch version 44.4
You can grab it from Here. (45.8 Mb)
root password: solobsd

News

Cheri-picking BSD | BSD Now 139

This week, Allan is out of town, but since when has that ever stopped us from bringing you a new episode of BSDNow? We have news, feedback & an excellent interview with Brooks Davis telling us about CheriBSD that you won’t want to miss.
View attached file (449 MB, video/mp4)

bsdtalk264 - Down the Gopher Hole

Playing around with the gopher protocol.   Description of gopher from the 1995 book "Student's Guide to the Internet" by David Clark. Also, at the end of the episode is audio from an interview with Mark McCahilll and Farhad Anklesaria that can be found at https://www.youtube.com/watch?v=oR76UI7aTvs
Check out http://gopher.floodgap.com/gopher/
File Info: 27 Min, 13 MB.
Ogg Link:https://archive.org/download/bsdtalk264/bsdtalk264.ogg

Code stuff 


Interesting articles



Read More»

BSD News 14/09/2015

BSD News 14/09/2015
Add Comment

Last week in BSD

Releases: GhostBSD
Other news: BSDnow, FreshPorts, DragonFly BSD, ZFS, CryptoLocker

Releases

GhostBSD 10.1 Finally Available

  • GhostBSD ISO image is hybrid that can be burn on DVD or USB stick
  • XFCE is coming back
  • Users can chose to install the BSD boot manager, Grub boot manager or simply None and use their Linux Grub
  • Station Tweak a fork of Mate Tweak
  • OctoPkg GUI frontend for pkgng written in Qt
  • Station Update Manager to update FreeBSD base system and third party software
  • Software from pkg or ports can be installed in the live DVD/USB session
  • VT Console by default
  • Instant verification for user and root to know if the password is strong and match on the system installer
  • Host name and user name auto completion when typing the real name
  • Vim

News

Multipath TCP | BSD Now 106

This week, we have Nigel Williams here to bring us all sorts of info about Multipath TCP, what it is, how it works and the ongoing effort to bring it into FreeBSD. All that and of course the latest BSD news coming your way, right now!
View attached file (434 MB, video/mp4)
 

FreshPorts Open sourcing the website

Today, lattera & Shirkdog and I sat down and converted the website repository from subversion to git. That repo is sitting there, ready to go. That process took about an hour. We ran this command: Yeah, I didn’t want to include all that that code in the repo. Various reasons, but mostly because they are [...]

Code stuff

Interesting articles



Wallpaper of the week

 from http://www.deviantart.com/art/FreeBSD-The-Power-to-Serve-71288066

Read More»

BSD News 11/05/15

Add Comment

Last week in BSD

Releases: OPNsense,, GhostBSD
Other news: vBSDCon, OpenBSD, BSDnow, NetBSD, Mumblehard, HardenedBSD, Wallpaper

Releases

OPNsense version 15.1.10 Released 


The full change log of 15.1.10 is as follows:
  • kernel: cleaned up the custom legacy patches to move the underlying FreeBSD back to more standard behaviour
  • kernel: removed dysfunctional dummynet patches and traffic shaper / limiter GUI feature (ETA for a replacement is 15.7)
  • kernel: stripped FAIRQ and CODELQ disciplines as they are no longer supported by FreeBSD
  • kernel: isolated MPD (Multi-link PPP daemon) alteration patches (will be dropped in a future release)
  • kernel: fixed IPSec dropping connections in some scenarios
  • images: a new NanoBSD-based image has been added to the release bundle (directly written to SD or HD)
  • notable ports updates: curl 7.42.1, ca_root_nss: 3.18.1
  • installer: omit swap and add noatime to root partition in quick/easy install when available space is under 30GB, fixed faulty exit on importer cancel
  • development: the ports tree is now kept fully in sync with FreeBSD
  • development: improved the ports build script in terms of error reporting and rebuilding speed
  • development: simplified file system path handling in most files to make the code easier to maintain
  • development: fixed a bug that prevented extracting our packages on ZFS
  • core: replaced most of the legacy PHP module usage with more portable (and maintainable) scripting code
  • dashboard: fixed the main link to always land on the dashboard to not confuse a restricted ACL setup
  • traffic shaper: layer 7 filter removed as the project has been abandoned (ETA for a replacement is 16.1)
  • system/settings: added an FTP proxy feature for clients trying to do active transfers
  • menu: replaced the old one with the new MVC equivalent plus assorted improvements
  • ACL: replaced the old one with the new MVC equivalent
  • login: polished the login screen behaviour
  • backend: don’t try to send a signal to non-existing process
  • user: can now change the password via “User: Change Password” from the menu
  • firmware: enforce signed packages on upgrade for our mirrors
  • rrd: fixed directory create-after-use
The images can be acquired from here:
https://opnsense.org/download/


GhostBSD 10.1 Beta 1 now available

I am pleased to announce the availability the first BETA build of the 10.1-RELEASE of the Release cycle which is available on SourceForge for the amd64 and i386 architectures.
Changes and fix between 10.1-ALPHA2 and 10.1-BETA1 include:
  • Mouse integration suport for VirtualBox
  • Instant verification for user and root to know if the password is strong and match on the system installer
  • Host name and user name auto completion when typing the real name
  • Guake has been added as default software
  • Vim has been added as default software
  • PCDM Locales fixed
The image checksums, ISO images and USB images are available here: http://www.ghostbsd.org/download-10.1
Please be aware that this release provides beta tester and developers with a system to test out new features for the upcoming release. This release may contain buggy code and features, so we encourage you to run it only on non-critical systems.
We encourage you to use our new issue system build with MantisBT http://issues.ghostbsd.org/main_page.php.


News

Verisign Announces vBSDcon 2015 

Following the success of the inaugural vBSDcon, Verisign has elected to host a second vBSDcon in Reston, Va at the Sheraton Reston hotel the weekend of September 11, 2015. vBSDcon is a technical conference focused on the BSD family of operating systems including, but not limited to, FreeBSD, OpenBSD, NetBSD, and others. Any user, developer, engineer, or innovator involved with any of the BSD family of operating systems will want to mark these dates. vBSDcon will feature plenary talks, Birds of a Feather discussions, lightning talks, and much more. Full details are available at http://www.vBSDcon.com/. Additionally, While vBSDcon currently does not operate an “official” call for presentations, proposals will be accepted until June. Anyone wishing to submit a talk is invited to do so by emailing vBSDcon@verisign.com. The event agenda is expected to be finalized and published in mid-June. 

[05/05/2015] Mumblehard - Malware that affects Linux and BSD Systems. 

Several websites have discussed this writeup by Marc-Etienne M.Leveille of ESET in regards to the Mumblehard malware ESET discovered while working with a customer. Though Linux malware (just like OSX malware) is nothing new, this software included a very interesting binary packer that actually detects BSD systems. The attack vector for this malware was by way of Joomla and Wordpress exploits, and an illegal copy of DirectMailer, which installs the backdoor once the software is loaded (M.Leveille, 2015). 

Below the Clouds | BSD Now 88  

This time on the show, we'll be talking with Ed Schouten about CloudABI. It's a new application binary interface with a strong focus on isolation and restricted capabilities. As always, all this week's BSD news and answers to your emails, on BSD Now - the place to B.. SD.  

OpenBSD 5.7 Shipping, First Pre-orders Arriving  

After a delay due to unfortunate production problems (the first such delay in 20 years), the OpenBSD Store announced that all pre-orders had been shipped.
And it seemed like only moments later that Raf Czlonka was the first to report on the misc@ mailing list that his pre-ordered OpenBSD 5.7 CD set had arrived.
Even if you hadn't preordered, you still have a chance to order your CD set and other swag by visting the OpenBSD Store. If you want to support the project financially in other ways, the Donations page is, as always, a good place to start.


HardenedBSD Teams Up With OPNSense


We are excited to formally announce teaming up with OPNSense to provide HardenedBSD-backed builds of OPNSense. For the past little while, we have been investigating OPNSense for our own purposes. We have been talking with Franco Fichtner, a core OPNSense developer, about the process of building customized builds. He has provided a lot of great input and feedback, answering all our questions.
Last week, we backported our work from the hardened/current/master branch (11-CURRENT) to 10-STABLE. This opened the door to HardenedBSD-based builds of OPNSense. The OPNSense team is already working on using LibreSSL instead of OpenSSL in their distribution. Franco has received multiple requests for HardenedBSD + LibreSSL. OPNSense is working towards using FreeBSD 10.1-RELEASE then will investigate rebasing with HardenedBSD.
We will provide periodic automated builds. The builds will have ASLR, PAGEEXEC/NOEXEC, and all our other various hardening features baked in.
Having an expertly hardened version of OPNSense will create a solid and secure experience. Work is moving at a fast pace. We are looking forward to this new relationship and are excited to see what it brings to the world.


Code stuff

More Intel video testing
New disklabel(8) templates make for a more flexible autoinstall 
Broadwell support, other video changes 
In Other BSDs for 2015/05/09

Interesting articles

DragonFly server and desktop 
Hands on experience with EdgeRouter ERLite-3 

Wallpaper of the week

as found at http://speciesseven.deviantart.com/art/NetBSD-blue-409694386

Read More»

BSD News 23/03/15

Add Comment

Last week in BSD

Releases: pfSense, GhostBSD, DragonFly, BSDrp
Other news: BSDSec, FreeNAS, DragonFly, LibreSSL, NetBSD, AsiaBSDCon, BSDnow, OpenBSD, OpenSSH, HardenedBSD,

BSDSec

LibreSSL 2.1.5 released 
LibreSSL 2.1.6 released 
libxfont errata 
libre/openssl patches available 
[FreeBSD-Announce] FreeBSD Security Advisory FreeBSD-SA-15:06.openssl  
[FreeBSD-Announce] FreeBSD Security Advisory FreeBSD-SA-15:06.openssl [REVISED]  
NetBSD Security Advisory 2015-003: NTPd multiple vulnerabilities (CVE-2014-929[3-6]) 
NetBSD Security Advisory 2015-004: Two vulnerabilities in the compatibility layers  
NetBSD Security Advisory 2015-005: buffer overflow in libevent (CVE-2014-6272)  
NetBSD Security Advisory 2015-006: OpenSSL and SSLv3 vulnerabilities 

Releases

 

BSD Router Project

BSDRP 1.55 is out: It includes latest FreeBSD security fixes and pmacct.

2.2.1 RELEASE Now Available 

pfSense® software 2.2.1 release is now available, bringing a number of bug fixes and some security fixes.

DragonFly 4.0.5 out 

I’ve tagged version 4.0.5 of DragonFly, and it’s available at your nearest mirror.  This revision is mostly to incorporate the newest OpenSSL security bump.

GhostBSD 10.1 Alpha 2 now available   


Changes and fix between 10.1-ALPHA1 and 10.1-ALPHA2 include:
  • The PCDM theme file as been fixed which was creating blinking black screen.
  • Macro windows decoration has been fixed.
  • The installer GPT partition problem has been found and fixed in pc-sysintall.
  • Some installer text error has been fix.
  • The user shell selection has been fix from the last change to have csh by default since fish have a bug from the ports.

Other news

 

 NetBSD ported to Hardkernel ODROID-C1

The Hardkernel ODROID-C1 is a quad-core ARMv7 development board that features an Amlogic S805 SoC (quad-core Cortex-A5 @ 1.5GHz), 1GB RAM and gigabit ethernet for $35 USD.
The ODROID-C1 is the first Cortex-A5 board supported by NetBSD. Matt Thomas (matt@) added initial Cortex-A5 support to the tree, and based on his work I added support for the Amlogic S805 SoC.
NetBSD -current (and soon 7.0) includes support for this board with the ODROID-C1 kernel.


Puffy in a Box | BSD Now 81

We're back from AsiaBSDCon! This week on the show, we'll be talking to Lawrence Teo about how Calyptix uses OpenBSD in their line of commercial routers. They're getting BSD in the hands of Windows admins who don't even realize it.  

Introducing NoExec 

Over the past few months, Oliver has been busy writing a new exploit mitigation feature for HardenedBSD: NoExec. The first part of this project was merged into master tree, and there are still ongoing issues to solve. Our implementation is inspired by PaX's. NoExec prevents pages that are marked as writable from being marked executable as well. It also prevents using mprotect(2) to change a non-executable page to an executable one. This, of course, can cause issues with applications that expect to be able to mark existing pages as executable. Firefox is a good example. You will need to either jail the application in a jail with NoExec turned off or use secadm to turn off NoExec for that application.
This feature bumps the HardenedBSD version number up to 17. We're doing a new package build as well. You'll also get some applications built as Position-Independent Executables (PIEs) with this package build.

Donation request for network SMP development 

 Martin Pieuchot (mpi@) writes in about what's needed for further SMP improvements in the network stack:
If you've been following my contributions to OpenBSD's kernel, you already know that in the past years I've been working on the Network Stack to make it more SMP friendly. All the network hackers present at s2k15 agreed to volunteer me to work on the next step: properly integrate the pseudo-drivers (carp(4), vlan(4), trunk(4)...) in order to take ether_input() out of the kernel lock.
Read more... 

bsdtalk252 - devio.us with Brian Callahan  


An interview with devio.us admin Brian Callahan. http://devio.us is a free shell provider that runs on OpenBSD.
File Info: 18Min, 8MB.
Ogg Link: https://archive.org/download/bsdtalk252/bsdtalk252.ogg

Code stuff

DRM 3.8 update committed 
New sshlockout option 
OpenSSH 6.8 Released
In Other BSDs for 2015/03/21 
 

Interesting articles

The FreeNAS Hardware Guide You’ve Asked For | Does ZIL Size Matter? Issue #18 
Unifying Mesa ports’ configure 
AsiaBSDCon 2015 Recap

Wallpaper of the week

 

as found at http://ghostbsd.org/wallpaper

Read More»

BSD News 16/03/15

BSD News 16/03/15
Add Comment

Last week in BSD

Releases: OPNsense, DragonflyBSD, GhostBSD
Other news: NetBSD, DragonFly BSD, pfSense, OpenBSD, BSDNow, TrueNAS, FreeBSD Foundation,


BSDSec

freetype patches available 
libssl patch available 


Releases

OPNsense version 15.1.7.1 Released

  • bsdinstaller: work towards embedded installations, e.g. Quick/Easy disk selection
  • opnsense-update: added command line switches and a manual page for usability’s sake
  • opnsense-update: will now remember that the base system is up to date
  • ports: updated to LibreSSL 2.1.4 (for our experimental LibreSSL flavour only)
  • directory layout: collapsed the /conf -> /cf/conf magic into a simple /conf directory (needs a reboot to take effect)
  • certificates: consistently lowered the default lifetime to 1 year
  • captive portal: fixed an issue that prevented traffic forwarding in some cases
  • NAT: do not resolve aliases on display to stay consistent with rules page
  • console menu: rebuilt the firmware upgrade option 12 to work on top of our new pkgng/opnsense-update system
  • crash reporter: can now be found under Diagnostics and was extended to show all parsing errors. The send button is currently disabled but feel free to copy+paste the messages to push them through the usual channels.
  • rc: fixed numerous parse errors in files previously missed by the regression test
  • rc: DHCP lease and RRD graph persistency after reboot, halt and config import (reinstall)
  • UPnP: the shortcuts menu has been reintroduced
  • login: redirect after login now brings up the previously selected page
  • dynamic DNS: fixed validation for custom entries that do not require a hostname
  • dynamic DNS: added support for Duck DNS
  • firewall log widget: fixed multiple bugs and updated style
  • pptp: brought back missing PHP includes
  • core: removed thousands of lines of unused code, style consolidation and path unwinding
  • core: multiple image to glyphicon conversions
  • development: moved pkgng config files out of the src/ directory to avoid tainting the system on core.git live mount
  • development: steady progress on the first MVC framework implementation of the upcoming proxy support

OPNsense version 15.1.7.2 Released   


  • bsdinstaller: fixed the package database wipe on custom install
  • bsdinstaller: install progress bar is now more responsive with regard to individual directories in /usr
  • firmware: removed obsoleted upgrade code and tools following our pkgng/opnsense-update approach
  • miniupnpd: now properly links to the OpenSSL/LibreSSL port
  • ipmitool: now properly links to the OpenSSL/LibreSSL port
  • core: extensive cleanups for PHP shebang usage, wiped numerous unused scripts and unreachable web pages, removed PBI remnants, removed ‘tmp_path’ softcoding to improve readability and git-grep(1) experience, removed stale debug statement that were only marginally useful while bumping the statements to default that indicate real errors
  • console: fixed halt script permissions and switched to synchronous mode
  • sysctl: added net.inet6.ip6.rfc6204w3 to improve the DHCPv6 experience
  • nat: remove target IP hardcoding in automatic rules (props to pfSense for pointing that out to us)
  • rc: fixed missing package database when using the MFS option for /var
  • configd: added a standard rc.d script for easy daemon control
  • mvc: a lot of new code to support general infrastructure for upcoming porting of features, e.g. proxy feature
  • help: adjusted links in the help menu to use HTTPS and improved targeting

DragonFly 4.0.4 out 


DragonFly 4.0 has had a minor point release, to 4.0.4.  There was a bug in the initial install where the rescue image installed on disk would be incorrect.  This was fixed after the first time a build/installworld was done, but might as well have it start out right.  There’s some other small fixes, and the release commit will show you the summary.  Download from your nearest mirror or update normally.

GhostBSD 10.1 Alpha 1 now available  


I am pleased to announce the availability the fist ALPHA build of the 10.1-RELEASE Release cycle which is available on SourceForge for the amd64 and i386 architectures.
Changes and fix between 4.0-RELEASE and 10.1-ALPHA1 include:
  • GDM as been replaced by PCDM
  • Wifimgr is now fully replaced by Networkmgr
  • A beta version of Update Station is now in GhostBSD whish update FreeBSD base system and software
  • The installer partition editor got a lot of improment
  • The installer use the latest pc-sysinstall from PCBSD GitHup
  • GhostBSD is now following the same release number then FreeBSD and PCBSD
The image checksums, ISO images and USB images are available here:
http://www.ghostbsd.org/download-10.1
 

Other news

The PC-BSD Tour II | BSD Now 80 


We're away at AsiaBSDCon this week, but we've still got a packed episode for you. First up is a sequel to the "PC-BSD tour" segment from a while back, highlighting how ZFS boot environments work. After that, Justin Gibbs joins us to talk about the FreeBSD foundation's 15th anniversary. We'll return next week with a normal episode of BSD Now - which is of course, the place to B.. SD.


OpenBSD 5.7 Preorders Started

Yes, you read that right!

Preorders of the upcoming OpenBSD 5.7 release have been enabled at the OpenBSD Store (based in the UK, ships worldwide).

The OpenBSD 5.7 release page is filling out nicely as we speak, and you can look up further details of what you have in store come May 1st by taking a peek at the detailed changelog page.

Now don't just stand there! Go ahead, order a CD set (or a few), or if you'll be downloading anyway, donate!

Update: The first copy has already been sold, just a few moments after the initial commit and before the actual announcement to misc@ (both by deraadt@) went out.


15th Anniversary and Spring Fundraising Kickoff 




Why donate to the Foundation? Your donations will help us continue and increase our support in the following areas:
  • Funding improvement and development projects, including: Native ISCSI kernel Stack, Updated video console (Newcons), UEFI system boot support, Capsicum component framework, IPv6 support in FreeBSD, Auditdistd improvements for FreeBSD cluster, and adding modern AES modes to OpenCrypto (to support IP/SEC).
  • Helping to provide consistent and on-time releases.
  • Educating the public and promoting FreeBSD with tools like our high-quality FreeBSD 10X Brochure and company visits to help
  • facilitate collaboration efforts with the Project.
  • Sponsoring BSD conferences and summits in Europe, Japan, Canada, and the US.
  • Protecting FreeBSD IP and providing legal support to the Project.
  • Purchasing hardware to build and improve FreeBSD project infrastructure.


Code stuff

Raspberry PI 2 support added
Sendmail removed, DMA added 
USB update  
Extra world messages
In Other BSDs for 2015/03/14 

Interesting Articles

5 Fun Things to Do with FreeNAS
Recent developments in pfSense 
TrueNAS 9.3 State of the Union
FreeBSD From the Trenches: Using autofs(5) to Mount Removable Media  
OpenBSD @ AsiaBSDCon: httpd, PIE, and more  

Wallpaper of the week

 


 http://www.wallpapersonweb.com/image-654271.html



Read More»
Subscribe to: Posts ( Atom )