| Sidebar Sponsor |
 |
|
Latest News and Updates |
|
|
| 2018-12-18 |
NEW • BSD Release: HardenedBSD 12-1200058 |
Rate this project
(9.0)
|
HardenedBSD is a security-enhanced fork of FreeBSD. the project has released a new stable branch, 12-STABLE, and 12-1200058 is the first version of the new series. The new branch includes the ability to run bhyve inside a jail and introduces Non-Cross-DSO Control-Flow Integrity (CFI). "Non-Cross-DSO CFI is an exploit mitigation technique that helps prevent attackers from modifying the behavior of a program and jumping to undefined or arbitrary memory locations. Microsoft has implemented a variant of CFI, which they term Control Flow Guard, or CFG. The PaX team has spent the last few years perfecting their Reuse Attack Protector, RAP. CFI, CFG, and RAP all attempt to accomplish the same goal, with RAP being the most complete and effective implementation. Clang's CFI is stronger than Microsoft's CFG and PaX Team's RAP is stronger than both CFI and CFG. RAP would be a great addition to HardenedBSD; however, it requires a GPLv3 toolchain and is patented." Further details can be found in the project's release announcement. Download: FreeBSD-12.0-STABLE-amd64-disc1.iso (899MB, SHA512, signature, pkglist). |
|
| About HardenedBSD
|
| Founded in 2014 by Oliver Pinter and Shawn Webb, HardenedBSD is a security-enhanced fork of FreeBSD. The HardenedBSD Project is implementing many exploit mitigation and security technologies on top of FreeBSD. The project started with Address Space Layout Randomization (ASLR) as an initial focal point and is now implementing further exploit mitigation techniques.
|
|
| Random Distribution | 
ERPOSS
During LinuxTag 2004 the German Federal Office for Information Security (BSI) and the company credativ unveiled the Linux Government Desktop. The Linux Goverment Desktop has been developed within the scope of the project ERPOSS which evaluates Open Source Software in government environments. Composed entirely of free software the distribution was available as a live CD as well as an install CD. One of the highlights brought by the Government Desktop was the fact that it saves the whole data on encrypted filesystems. Furthermore KMail was preconfigured to send and receive encrypted e-mail (GnuPG and S/MIME) and to make use of all kinds of authority certificates. The package was completed by integrated spam and virus protection and a preconfigured personal firewall.
Status: Discontinued
|
|