CIS Releases FreeBSD Security Benchmark

JohnnyDime writes "The Center for Internet Security (CIS) has released a security benchmark and auditing tool for FreeBSD versions 4.8 and later. This is a free download available from cisecurity.org. CIS is a non-profit, consensus driven organization that uses experts from the public, private, and academic sectors to develop security guidance for operating systems and applications."

Comments

Heh

[setagllib]

Not that it needs one ;)

But more proof that BSD is not dead. It gets support from the companies that know what they're doing.

Just you wait for 5.3-RELEASE!

Re:Heh

[sp0rk173]

And just YOU wait until the VFS system in DragonFly finishes it's top-to-bottom re-write! I have a feeling this new BSD isn't going to be something to sneeze at. I've been following the kernel@ mailing list, and it sounds damn awesome. It's going to be one hell of a beautiful little OS. Let's hope it runs as beautifully as it sounds on paper when all is coded and done.

Re:Heh

[SillyNickName4me]

That is nice... lets see when there is a result (have seen enough results from the people involved in Fragonfly, so that was not intended as a cynical statement, just as a huint that only what exists today can be used today)

Anyway, unlike what some people believe, this kind of competition between different BSD distributions is a good thing, it allows people to go their own way with their ideas, and after a while all BSDs get a better solution (if the idea turned out to be better that is)

Re:It is official -- Netcraft confirms: *BSD is dy

[ToasterTester]

The same guy keeps cutting and pasting the same message over and over. Just the number of times he's posted it is proof FreeBSD is not dead.

Linus, will you please stop posting this.


FACT: Chuckie Daemon will not die!

BSD is NOT dying. HPUX is.

[alphaque]

hmm, oddly the HTML title and title bar both say "Benchmarks for HPUX". :)

see the link above at http://www.cisecurity.org/bench_freebsd.html

Re:It is official -- Netcraft confirms: *BSD is dy

[endx7]

FACT: his name is not Chuck, or Chuckie or anything like that. If you must give him a name, call him Beastie.

At least, I think it is a him.

What's in a name?

[JamesTRexx]

Aren't we supposed to call it our new overlord?

Re:Read carefully.

[SillyNickName4me]

Hmm... offtopic? more like troll.. and for once a somewhat funny one ;)

Re:seriously

[torstenvl]

Troll? WTF. I'm tired of Moderators with axes to grind.

Debian's package management IS technologically superior to Mandrakes. Period. It's more flexible and more powerful. In Mandrake there is no way to 'purge' a package -- getting rid of the original package contents and configuration files that were generated therewith and essentially making your system as though that package were never there. There is also no way to set up different dependency levels, hence the complaints about Mandrake being 'bloated' with unnecessary dependencies -- RPM doesn't provide a way to make optional dependencies. It just doesn't.

Ports/Portage is more flexible yet, as you can specify compiler flags with -DWHATEVER in Ports or with USE flags in Portage. I use this feature very frequently, for example so I can install JED without needing to install X11 first. A 'purge' feature would be nice here too, but I guess the whole premise is that you're supposed to be familiar enough with your system using Gentoo or FreeBSD that you can decide to keep or remove configs and so on anyway. That, and Gentoo has its etc-update thing, which is handy.

There. I've backed up my opinions. If you Mod me down for saying things I have objective evidence for, well, you can just lick my salty nuts.