Use ugidfw to limit/deny access to ifconfig - "man ugidfw"
Cheers,
On 04/23/11 08:21, xor wrote:
> Hullo
> First off, thanks for a lovely operating system <3
>
> I decided to go for FreeBSD perhaps 3 days ago. Before, ive been an
> Debian/OpenBSD guy, and ive only used my obsd box for redundant
But then the root in the jail can just go and compile a new version of
ifconfig from the ports collection. (Generally its a flawed idea to
just remove the binaries. Someone can just download new ones. And if
downloading new binaries is not allowed, they can always just push
stdin through b64.. etc
Am 22.04.2011, 22:21 Uhr, schrieb xor :
Hullo
First off, thanks for a lovely operating system <3
I decided to go for FreeBSD perhaps 3 days ago. Before, ive been an
Debian/OpenBSD guy, and ive only used my obsd box for redundant
firewalls and networking. Ive not been running any services off th
Hullo
First off, thanks for a lovely operating system <3
I decided to go for FreeBSD perhaps 3 days ago. Before, ive been an
Debian/OpenBSD guy, and ive only used my obsd box for redundant
firewalls and networking. Ive not been running any services off the
boxen.
The reason I decided to go for Fr
