FreeBSD Transient Memory problem?

Jonathon Wright jonathon.s.wright at gmail.com
Thu Sep 12 00:15:12 UTC 2013


All,

I have posted this question (username-scryptkiddy) in the forums:
http://forums.freebsd.org/showthread.php?t=41875
but was suggested to bring it here to the mailing list for discussion.

Basically, FreeBSD 8.3 (64bit) is what we use in our shop. We were
inspected by a security team and they had issues with FreeBSD's memory
management.

Namely the transient memory and object reuse areas of FreeBSD. They claimed
that FreeBSD did not have a Common Criteria (EAL1-4) evaluation completed,
and therefore was vulnerable to the Transient memory problem.

Our higher ups need some sort of documentation / testing  that can be used
to counter this, since changing Operating Systems is not something we have
time / manpower to do, but might have too based on this supposed 'finding'.

The post has all the details. Let me know I need to repost in this as well.

JW


More information about the freebsd-security mailing list