Last week in BSD
Releases: GhostBSDOther news: OPNsense, HardenedBSD, OpenBSD, Linux, BSDnow, n2k16, Wallpaper, DragonFlyBSD
BSDSec
Releases
GhostBSD 10.3 RC1 is ready for testing
This first RC release is ready for testing new
feature in GhostBSD 10.3, MATE and XFCE is available on SourceForge for
the i386, amd64, and amd64-uefi architectures.
Language
Undefined
News
New Core Team Member
The OPNsense project is growing rapidly and it’s with great pleasure that the OPNsense core team
may announce that our team will be strengthened with Shawn Webb. Shawn
has already been doing lots of great work and his formal membership is
seen as a logical step forward by all of us.
Shawn Webb Over the past year, I have had the wonderful experience of working with the OPNsense core team in porting over HardenedBSD’s robust ASLR
implementation. It is with pleasure and humility that I have accepted their invitation to join the core team. My overarching goal will be to port the main features of HardenedBSD to OPNsense.
Address Space Layout Randomization, or ASLR for short, is an exploit mitigation technology that aims to make certain kinds of vulnerabilities
harder to successfully exploit. In order to fully apply ASLR, applications must be compiled as a Position-Independent Executable (PIE). In the short term, my next goal is to enable PIE fully across OPNsense’s ports tree. I’m using HardenedBSD’s ports tree and package building infrastructure as a test bed prior to importing into OPNsense.
OPNsense is investigating migrating to 11.0-RELEASE for its 17.1 release. The Virtual Memory (VM) subsystem has changed drastically between FreeBSD 10 and FreeBSD 11. Since ASLR deals with the VM subsystem, extreme care must be taken in the update of the codebase from FreeBSD 10.3 to 11.0. I will assist in those efforts by freshly porting over the ASLR implementation from HardenedBSD 11.0 to OPNsense’s FreeBSD 11.0 codebase.
I look forward to being a part of the OPNsense core team. The coordination between HardenedBSD and OPNsense will bring a more solid
foundation on which home users and enterprises alike can build secure and scalable networks.
Shawn Webb Over the past year, I have had the wonderful experience of working with the OPNsense core team in porting over HardenedBSD’s robust ASLR
implementation. It is with pleasure and humility that I have accepted their invitation to join the core team. My overarching goal will be to port the main features of HardenedBSD to OPNsense.
Address Space Layout Randomization, or ASLR for short, is an exploit mitigation technology that aims to make certain kinds of vulnerabilities
harder to successfully exploit. In order to fully apply ASLR, applications must be compiled as a Position-Independent Executable (PIE). In the short term, my next goal is to enable PIE fully across OPNsense’s ports tree. I’m using HardenedBSD’s ports tree and package building infrastructure as a test bed prior to importing into OPNsense.
OPNsense is investigating migrating to 11.0-RELEASE for its 17.1 release. The Virtual Memory (VM) subsystem has changed drastically between FreeBSD 10 and FreeBSD 11. Since ASLR deals with the VM subsystem, extreme care must be taken in the update of the codebase from FreeBSD 10.3 to 11.0. I will assist in those efforts by freshly porting over the ASLR implementation from HardenedBSD 11.0 to OPNsense’s FreeBSD 11.0 codebase.
I look forward to being a part of the OPNsense core team. The coordination between HardenedBSD and OPNsense will bring a more solid
foundation on which home users and enterprises alike can build secure and scalable networks.
OpenBSD tmpfs on its last legs
As a result of apparent lack of maintenance, Theo de Raadt has disabled tmpfs.
CVSROOT: /cvs Module name: src Changes by: deraadt@cvs.openbsd.org 2016/07/25 13:52:56 Modified files: sys/conf : GENERIC Log message: disable tmpfs because it receives zero maintainance.
You probably didn’t use this anyway
The last bits of Linux emulation have been removed from DragonFly.
It’s 32-bit, so it’s been unsupported since DragonFly went to 64-bit
only with the 4.0 release. Also, some other 32-bit only items are gone,
including the cs, ep, ex, fe, and vx
network drivers. It’s almost impossible that anyone was using it, but
it’s notable because that’s some… 15-20k lines of code gone? Removal of
unused code is also positive.
Myths, Pi's & Features, oh my! | BSD Now 154
This week on BSDNow, we are taking a look at a few different
tutorials, including running your very own RPi web-server. (Come-on, you
know you’ve thought of it). Plus we have a GhostBSD tutorial, a look at
a GitHub project to run Steam Linux on FreeBSD 11 & more!
You’ll want to stick-around for your place to B...SD!
You’ll want to stick-around for your place to B...SD!
