Créer un compteSe connecter

Recherches récentes

Aucune recherche récente

Options de recherche

Disponible uniquement lorsque vous êtes connecté.
pouet.chapril.org est l'un des nombreux serveurs Mastodon indépendants que vous pouvez utiliser pour participer au fédiverse.
Chapril https://www.chapril.org est un projet de l'April https://www.april.org

Administré par :

Statistiques du serveur :

1,1K
comptes actifs

pouet.chapril.org: À proposAnnuaire des profilsPolitique de confidentialité

Mastodon: À proposTélécharger l’applicationRaccourcis clavierVoir le code sourcev4.3.7

#hardenedbsd

14 messages11 participants2 messages aujourd’hui
Public *
BSD NL

Today is the BSD-NL Conference - Early 2025 🐡😈⛳

In between all the hacking and slacking there will be talks!

You can catch the stream on: exquisite.tube/c/bsdnlconferen

🌐 events.bsdnl.nl/early25/talk/W
🎤 A packet's journey through pf
A walkthrough of a packet's journey through (FreeBSD's) pf, concentrating on the big picture and its implications.
by Kristof Provost

🌐 events.bsdnl.nl/early25/talk/V
🎤 Disk Space - The final frontier?
We'll follow the adventures of the spaceship BSD-NL 2025 (since NCC-1701 was already taken) on their voyage of exploration.
by Benedict Reuschling

The full schedule 📅 events.bsdnl.nl/early25/schedu

📆 2025-04-12 / April 12th 2025
🕐 10:00-23:00 CET
📍 Brouwerij Maximus (Utrecht)
🌐 bsdnl.nl

ExquisiteTubeBSD-NL ConferenceMeeting once, or twice a year, at EuroBSDCon, BSDCan or AsiaBSDCon isn’t enough! So we decided to start BSD-NL, The BSD Community in The Netherlands. https://bsdnl.nl For all your *BSD needs, eithe...
#BSDNL#RUNBSD#BSD
Public
Shawn Webb

It looks like it's going to be rather difficult to stop fdlopen(extattrfd) from the perspective of the RTLD. The file descriptor looks like a regular file, so it's not possible to know that the underlying descriptor points to a filesystem extended attribute.

I think I might be able to prevent mmap(..., PROT_EXEC, ..., extattrfd), though that could be somewhat expensive from a performance perspective. That expense would only be paid if PROT_EXEC is specified, so that could help some.

If I use that approach, I would definitely gate it with a sysctl tunable defaulted to enabled.

For those following along, I'm trying to mitigate this proof-of-concept: git.hardenedbsd.org/shawn.webb

GitLabextattr_dlopen/dlopen.c · main · Shawn Webb / random-code · GitLabHardenedBSD GitLab
#infosec#HardenedBSD
Public *
BSD NL

T-1 days until BSD-NL Full Day Event - Early 2025 🐡😈⛳

We are almost there! See you all tomorrow!

In between all the hacking and slacking there will be talks!

🌐 events.bsdnl.nl/early25/talk/W
🎤 A packet's journey through pf
A walkthrough of a packet's journey through (FreeBSD's) pf, concentrating on the big picture and its implications.
by Kristof Provost

🌐 events.bsdnl.nl/early25/talk/V
🎤 Disk Space - The final frontier?
We'll follow the adventures of the spaceship BSD-NL 2025 (since NCC-1701 was already taken) on their voyage of exploration.
by Benedict Reuschling

The full schedule 📅 events.bsdnl.nl/early25/schedu

📆 2025-04-12 / April 12th 2025
🕐 10:00-23:00 CET
📍 Brouwerij Maximus (Utrecht)
🌐 bsdnl.nl

events.bsdnl.nlA packet's journey through pf BSD-NL Conference - Early 2025A walkthrough of a packet's journey through (FreeBSD's) pf, concentrating on the big picture and its implications. We'll cover when packets are inspected, when rules are evaluated and how states are used. Along the way we'll cover what DTrace probes can show us, what some of pfctl's counters mean and just how many times pf can look at a single packet. This talk is intended for firewall admins looking for a deeper understanding and aspiring pf developers. It is not a "How to use pf" talk.
#BSDNL#RUNBSD#BSD
Suite du fil
Public
Shawn Webb

From a usability perspective, the last thing to implement is a method for downloading a tarball of the repo (at a specific commit, tag, or branch). That would enable us to integrate support for distset downloading in the #HardenedBSD ports tree (similar to how #GitLab and #GitHub distset support is implemented).

Screenshot of GitLab, with the required feature highlighted.
Public
Shawn Webb

Current status: Setting up an internal test #Radicle network. I'd like to see if we can at least provide our own Radicle seed network for the #HardenedBSD src and ports trees.

I don't want to place undue burden on the main Radicle network. At least, not until we confirm that it can handle our larger repos.

ExplorerFlux en direct
À propos