Subject: Re: NetBSD being used as the core for secure OS distro
To: Shane M. Coughlan <shane_coughlan@hotmail.com>
From: Lubomir Sedlacik <salo@Xtrmntr.org>
List: netbsd-users
Date: 09/25/2003 16:58:15
--mrJd9p1Ce66CJMxE
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Thu, Sep 25, 2003 at 03:52:21PM +0100, Shane M. Coughlan wrote:
> > Three things you may wish to look at in NetBSD-current:
> > * verifiedexec - upload fingerprint of binaries that may be executed i=
nto
> > the kernel. binaries whose fingerprints do not match cannot be execute=
d.
> > http://netbsd.gw.com/cgi-bin/man.cgi?veriexecctl++NetBSD-current
> > http://netbsd.gw.com/cgi-bin/man.cgi?verifiedexec++NetBSD-current
> > * cgd - disk-based encryption
> > http://netbsd.gw.com/cgi-bin/man.cgi?cgdconfig++NetBSD-current
> > http://netbsd.gw.com/cgi-bin/man.cgi?cgd++NetBSD-current
> > (if you want "users" to encrypt individual files then you probably
> > don't gain much in using tcfs instead of gpg.)
> > * systrace - security policies for individual processes.
> > http://netbsd.gw.com/cgi-bin/man.cgi?systrace++NetBSD-current
> > http://netbsd.gw.com/cgi-bin/man.cgi?systrace+4+NetBSD-current
> > Also, -current has a non-executable stack, and other regions, depending
> > on what architecture you are using.
>=20
> Hi. Sorry to be a pest, but those links don't work. When I try to open
> them I get:
> The page you are looking for might have been removed, had its name change=
d,
> or is temporarily unavailable.
s/man.cgi/man-cgi/g
regards,
--=20
-- Lubomir Sedlacik <salo@Xtrmntr.org> --
-- <salo@silcnet.org> --
--mrJd9p1Ce66CJMxE
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (NetBSD)
iD8DBQE/cwKHiwjDDlS8cmMRAiABAJ0dZuzFkO2cZqojHSqoQ55ZMIW6MACeOnAp
eHInW6la/tjvJe8bJE+zSF0=
=0Tt2
-----END PGP SIGNATURE-----
--mrJd9p1Ce66CJMxE--