]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
MFC r302897:
authorrobak <robak@FreeBSD.org>
Thu, 28 Jul 2016 15:54:17 +0000 (15:54 +0000)
committerrobak <robak@FreeBSD.org>
Thu, 28 Jul 2016 15:54:17 +0000 (15:54 +0000)
commite442a085d06ea3acc1ac496469c4e212774a2c5d
tree713e23dc1b71a207f41baff8f2fc5397b67d72a0
parent4bd805f9ce10695a0bd8d0c9baa0269e6b365d03
MFC r302897:

Add new System Hardening menu and options to bsdinstall.

This patch add new 'hardening' file responsible for new bsdinstall
'System Hardening' menu allowing users to set some sane and carefully
picked system security options (like random process id's, hiding
other users/groups processes and others).

All options are OFF by default in this patch due to POLA principle
with intention to turn change some of them to ON by default in future.

Reviewed by: adrian, allanjude, bdrewery, nwhitehorn
Approved by: re@, adrian, allanjude
usr.sbin/bsdinstall/scripts/Makefile
usr.sbin/bsdinstall/scripts/auto
usr.sbin/bsdinstall/scripts/config
usr.sbin/bsdinstall/scripts/hardening [new file with mode: 0755]