Subject: Re: NetBSD being used as the core for secure OS distro
To: Shane M. Coughlan <shane_coughlan@hotmail.com>
From: Lubomir Sedlacik <salo@Xtrmntr.org>
List: netbsd-users
Date: 09/25/2003 16:58:15
--mrJd9p1Ce66CJMxE
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Sep 25, 2003 at 03:52:21PM +0100, Shane M. Coughlan wrote:
> > Three things you may wish to look at in NetBSD-current:
> >  * verifiedexec - upload fingerprint of binaries that may be executed i=
nto
> >  the kernel. binaries whose fingerprints do not match cannot be execute=
d.
> >    http://netbsd.gw.com/cgi-bin/man.cgi?veriexecctl++NetBSD-current
> >    http://netbsd.gw.com/cgi-bin/man.cgi?verifiedexec++NetBSD-current
> >  * cgd - disk-based encryption
> >    http://netbsd.gw.com/cgi-bin/man.cgi?cgdconfig++NetBSD-current
> >    http://netbsd.gw.com/cgi-bin/man.cgi?cgd++NetBSD-current
> >   (if you want "users" to encrypt individual files then you probably
> >    don't gain much in using tcfs instead of gpg.)
> >  * systrace - security policies for individual processes.
> >    http://netbsd.gw.com/cgi-bin/man.cgi?systrace++NetBSD-current
> >    http://netbsd.gw.com/cgi-bin/man.cgi?systrace+4+NetBSD-current
> > Also, -current has a non-executable stack, and other regions, depending
> > on what architecture you are using.
>=20
> Hi.  Sorry to be a pest, but those links don't work.  When I try to open
> them I get:
> The page you are looking for might have been removed, had its name change=
d,
> or is temporarily unavailable.

s/man.cgi/man-cgi/g


regards,

--=20
-- Lubomir Sedlacik <salo@Xtrmntr.org>                   --
--                  <salo@silcnet.org>                   --

--mrJd9p1Ce66CJMxE
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (NetBSD)

iD8DBQE/cwKHiwjDDlS8cmMRAiABAJ0dZuzFkO2cZqojHSqoQ55ZMIW6MACeOnAp
eHInW6la/tjvJe8bJE+zSF0=
=0Tt2
-----END PGP SIGNATURE-----

--mrJd9p1Ce66CJMxE--