Questions tagged [freebsd]
A free Unix-like operating system descended from Research Unix via the Berkeley Software Distribution (BSD).
19 questions
2 votes
1 answer
662 views
What are these: "sshd-session: banner exchange ... invalid format"?
My /var/log/auth.log has a lot of log-entries like: sshd-session[PID]: banner exchange: Connection from ip.add.res.s port PORT: invalid format The IP-addresses are from all over the world, so, ...
- 133
2 votes
1 answer
232 views
Is it possible for a hostname lookup to be temporarily lying (wrong ISP)?
In 2017, I was running a local website on my own dedicated server in a professional data center. FreeBSD. Installed by me remotely. Maintained carefully by me. No other human users than myself. I was ...
- 21
0 votes
3 answers
448 views
Would FreeBSD and OpenBSD have similar known-past-vulnerability stats if they were configured similarly?
OpenBSD has had much fewer "code execution" vulnerabilities and even fewer exploits than FreeBSD, according to https://cvedetails.com : https://www.cvedetails.com/product/163/Openbsd-...
- 353
2 votes
1 answer
1k views
Is native OpenZFS (on FreeBSD) block-level encryption secure?
I am considering using OpenZFS on FreeBSD. I am not quite sure how secure native OpenZFS encryption is? If somebody steals my server and the disks, is he able to decrypt the files? In a Discord room I ...
- 1,501
0 votes
1 answer
2k views
LFI to RCE through User-Agent
I'm doing a pentest on a FreeBSD machine running CuppaCMS. Already managed to login into the CMS with admin privilege, but it only takes me to a manager menu, with some options to change some tables ...
3 votes
0 answers
186 views
Do BSD jails protect against some vulnerability class that LXC doesn't?
You can find many claims online regarding BSD jails being "better" in some way than Linux namespaces for containment, but they typically lack technical details. From what I understand, the attack ...
- 215
1 vote
0 answers
447 views
Tightly locking down a FreeBSD jail
Suppose one is running a single internet-facing daemon, as a service in a FreeBSD jail, and expects targeted hostile attacks targeting open WAN ports and services. Like many services, the service and ...
- 1,694
2 votes
1 answer
1k views
Do systemd-nspawn containers provide the same security guarantees as FreeBSD jails?
I am evaluating the systemd-nspawn containers security and would like to know if the systemd-nspawn containers provide the same security guarantees as FreeBSD jails? Specially, can an attacker escape ...
- 121
3 votes
1 answer
316 views
How can I ensure higher levels of privacy when hosting others' emails?
I can set up my own email server, and quite happy with it, using standard open source components - postfix, roundcube, etc on top of HardenedBSD or OpenBSD. I'd like to offer the use of my email ...
- 1,694
2 votes
1 answer
703 views
Is the traversal permission in a Unix filesystem exploitable by itself, in the absence of any other permissions/ACLs?
Scenario/question: A unix directory tree has NTFv4 ACLs configured to allow an unprivileged account traversal on all dirs (but no other ACL granting further rights on any file/dir anywhere In such a ...
- 1,694
1 vote
0 answers
1k views
Are BSD jails a "huge security liability"? [closed]
In this 2014 blog post from an apparently anti-BSD blog, the author criticizes BSD jails for being poorly designed and therefore insecure. The opening paragraph reads: If you’re thinking of ...
- 541
0 votes
1 answer
484 views
mySQL into outfile strange behaviour
I have sql-injection with file_priv=Y (root user) but I can only create file in /tmp and /var/tmp directories even when i have 777 permissions to destination folder - mysql server just won't create ...
- 143
4 votes
1 answer
4k views
How to use openssl ca with prime256v1?
I am new to the encryption world, and reading about this, most websites say to use the prime256v1 for better performance and security. After some days testing, finally I get my openssl CA structure ...
- 41
1 vote
1 answer
4k views
Is BSD more secure than GNU/Linux? [closed]
BSD controls the OS while Linux is just a kernel. BSD is less popular than Linux, but which one is better in terms of security?
- 2,137
8 votes
1 answer
3k views
Is receiving IPv4 connections on AF_INET6 sockets insecure?
The FreeBSD man page for inet6 has the following: By default, FreeBSD does not route IPv4 traffic to AF_INET6 sockets. The default behavior intentionally violates RFC2553 for security reasons. Listen ...
- 1,390